In Celoxis you can set 3 types of privileges. These are:

Grant, which allows you to perform a certain action,
Deny, which does not allow you to perform a certain action, and
Unspecified, which shifts the responsibility of checking to the next level. If all levels are unspecified, permission is denied.

To take any action, a user needs to have been granted the appropriate privilege. For instance, to view a project, the user will need to be granted the "View Project" privilege, while for creating a task in a project, the "New Task" privilege will be required.

Browser not supported