Re: [rt-users] User with no WatchAsAdminCc right was added as AdminCc

[Gerard FENELON]

Thanks Kevin

Is there a way to prevent this behaviour ?
Sometimes I end up with Customers in AdminCc of tickets ...

Gerard

On 2011-12-19 19:01, Kevin Falcone wrote:

On Fri, Dec 16, 2011 at 05:24:41PM +0100, Gerard FENELON wrote:

    Hi

    One of my privileged users A was able to add another user B as AdminCc
    even though that second User B does not have the WatchAsAdminCc right as 
far as I can make
    out.

That right only affects your ability to add yourself as an AdminCc
User A has ModifyTicket, they can add anyone they want as an AdminCc.

-kevin

    User B is not privileged.
    User B does not have any rights for that Queue in 
Admin/Queues/UserRights.html

    User B belongs to only one group C directly.
    Group C is not included in any other.
    Group C does not have any rights in Admin/Groups/GroupRights.html
    Group C does not have any rights for that Queue in 
Admin/Queues/GroupRights.html

    The WatchAsAdminCc right on that queue is only given to User-defined groups 
to which User B
    does not belong either directly or indirectly.

    If I look at the RightsMatrix for User B, he does not have WatchAsAdminCc 
right on any queue.
    If I look at the RightsMatrix for Group C, it does not have WatchAsAdminCc 
right on any queue.

    User A has the following rights on that queue C

      * CommentOnTicket
      * CreateTicket
      * ModifyTicket
      * OwnTicket
      * ReplyToTicket
      * SeeQueue
      * ShowACL
      * ShowOutgoingEmail
      * ShowTicket
      * ShowTicketComments
      * StealTicket
      * TakeTicket
      * Watch
      * WatchAsAdminCc

    Any ideas where I might have messed up ?
    Gerard

--------
RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5 & 6, 2012