[rt-users] Manage user rights

2012-02-13 Thread Anthony BRODARD
Hi list,

I'm running on RT 3.8.7.
I have some fonctionnal user which appear in the Query Builder, in the list
of possible tickets owners.
I would to drop there users from the list. They don't have the Own Ticket
right. They are only used as admin-cc in queues, and are not privileged.
But they always are in the list. Did you know which right cause this
problem ?

How do you manage your users / groups / files rights ? And have you any
tool which permit to see right for a specific user / group / file ?
I've tried to install the plugin RTx-RightsMatrix, but it isn't compatible
with this version of RT.

Thanks,
Anthony

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012

Re: [rt-users] Manage user rights

2012-02-13 Thread Ruslan Zakirov
Hi,

This list select more people than it should if you grant OwnTicket to a role.

I'm pretty sure RightsMatrix worked with RT 3.8.x, may be older versions.

You can always `select * from ACL where RightName = 'OwnTicket'` and
work from there.

On Mon, Feb 13, 2012 at 18:23, Anthony BRODARD
brodard.anth...@gmail.com wrote:
 Hi list,

 I'm running on RT 3.8.7.
 I have some fonctionnal user which appear in the Query Builder, in the list
 of possible tickets owners.
 I would to drop there users from the list. They don't have the Own Ticket
 right. They are only used as admin-cc in queues, and are not privileged.
 But they always are in the list. Did you know which right cause this problem
 ?

 How do you manage your users / groups / files rights ? And have you any tool
 which permit to see right for a specific user / group / file ?
 I've tried to install the plugin RTx-RightsMatrix, but it isn't compatible
 with this version of RT.

 Thanks,
 Anthony
 
 RT Training Sessions (http://bestpractical.com/services/training.html)
 * Boston — March 5  6, 2012



-- 
Best regards, Ruslan.

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston  March 5  6, 2012

Re: [rt-users] Manage user rights

2012-02-13 Thread Kevin Falcone
On Mon, Feb 13, 2012 at 06:17:04PM +0100, Anthony BRODARD wrote:
About the SQL request, we have only 1 occurrence of an AdminCc with the 
 OwnTickets right,
but the queue is disable, and the right didn't concern the users displayed 
 in the list.
All others occurences have the entry Group in PrincipalType. The users 
 concerned are not
in any group.

Keep in mind that users are in lots of groups (for example, they're
going to be in Everyone and Unprivileged) and they'll be in Role
groups on tickets.  You should join through to Groups and look at what
groups they're actually in.

-kevin


pgpVXBQiL3coE.pgp
Description: PGP signature

RT Training Sessions (http://bestpractical.com/services/training.html)
* Boston — March 5  6, 2012