[rt-users] Manage user rights
Hi list, I'm running on RT 3.8.7. I have some fonctionnal user which appear in the Query Builder, in the list of possible tickets owners. I would to drop there users from the list. They don't have the Own Ticket right. They are only used as admin-cc in queues, and are not privileged. But they always are in the list. Did you know which right cause this problem ? How do you manage your users / groups / files rights ? And have you any tool which permit to see right for a specific user / group / file ? I've tried to install the plugin RTx-RightsMatrix, but it isn't compatible with this version of RT. Thanks, Anthony RT Training Sessions (http://bestpractical.com/services/training.html) * Boston March 5 6, 2012
Re: [rt-users] Manage user rights
Hi, This list select more people than it should if you grant OwnTicket to a role. I'm pretty sure RightsMatrix worked with RT 3.8.x, may be older versions. You can always `select * from ACL where RightName = 'OwnTicket'` and work from there. On Mon, Feb 13, 2012 at 18:23, Anthony BRODARD brodard.anth...@gmail.com wrote: Hi list, I'm running on RT 3.8.7. I have some fonctionnal user which appear in the Query Builder, in the list of possible tickets owners. I would to drop there users from the list. They don't have the Own Ticket right. They are only used as admin-cc in queues, and are not privileged. But they always are in the list. Did you know which right cause this problem ? How do you manage your users / groups / files rights ? And have you any tool which permit to see right for a specific user / group / file ? I've tried to install the plugin RTx-RightsMatrix, but it isn't compatible with this version of RT. Thanks, Anthony RT Training Sessions (http://bestpractical.com/services/training.html) * Boston — March 5 6, 2012 -- Best regards, Ruslan. RT Training Sessions (http://bestpractical.com/services/training.html) * Boston March 5 6, 2012
Re: [rt-users] Manage user rights
On Mon, Feb 13, 2012 at 06:17:04PM +0100, Anthony BRODARD wrote: About the SQL request, we have only 1 occurrence of an AdminCc with the OwnTickets right, but the queue is disable, and the right didn't concern the users displayed in the list. All others occurences have the entry Group in PrincipalType. The users concerned are not in any group. Keep in mind that users are in lots of groups (for example, they're going to be in Everyone and Unprivileged) and they'll be in Role groups on tickets. You should join through to Groups and look at what groups they're actually in. -kevin pgpVXBQiL3coE.pgp Description: PGP signature RT Training Sessions (http://bestpractical.com/services/training.html) * Boston March 5 6, 2012