Different Permissions per project based on Company

[racerx]

We’re using Version 2.1.1
I'm confident this will be ridiculously simple, but I can’t find this in the forum and haven’t figured it out.

I have one user that I want to see and edit all projects for one company.
The same user, should only have “View” permissions for projects of another company.

Seems simple enough, right?

I've set up a role named "Company_Defined" with:

Access
Add
Delete
Edit
View

for Projects, Task and Logs

I then add permissions to user account for Company "A"
Access
Add
Delete
Edit
View

I then add permissions to same user account for Company "B"
Access
View

But user can still edit and create projects and tasks for any projects assigned to Company "B"

I even tried denying Edit permissions for Company B and it still didn't work.
What am I doing wrong?
Help would be greatly appreciated.

[Karen]

Try explicitly denying company access at the role level as we lay out here:

http://docs.dotproject.net/index.php/Permissions_-_Examples_of_Permission_Setups#Restrict_At_the_Com pany_Level

[racerx]

Thanks for taking a few moments here Karen.

* Role *
Non Admin: Allow (Access, Add, Delete, Edit, View)
Companies: Deny (Access, Add, Delete, Edit, View)

* User Permissions *
Companies | Company A Allow (Access, Add, Delete, Edit View)
Companies | Company B Allow (Access, View)
Companies | Company B Deny (Add, Delete, Edit)

This set up still allows Company B projects & tasks to be added and edited.