Re: [rt-users] RT Privileges question

2007-07-25 Thread Robert Long
Kenneth Crocker wrote:
 To all,



 We are currently testing 3.6.4 and I was playing with privileges
 and took away the watch right from requestors. I created a test
 ticket with a requestor who is in 1 group and that group could not do
 anything except TakeTicket and SeeQueue. No other rights at all
 for any group, role or system. When I change the status on the ticket,
 the scrip for that change initiated and the requestor still got an
 E_mail. I thought that if you did not have the WATCH right, you
 would not receive E_mails. This person also is NOT a watcher on the
 Queue either. Anyone have experience with this right?


 Kenn
 LBNL


Hey Kenn,

You'll need to change the 'scrip' that causes this to happen.  It's
located in configuration-global-scrips, depending on your setup there
should be something that updates the requestor on correspondence. 

( others correct me if I'm wrong )

I think of the privileges like this; they tell what a user can do, not
what RT does.  The scrips tell RT what to do, you could easily set them
up to send an email to someone who has no privileges or is not even in
RT's configuration.

If you have a situation where you don't want particular users to receive
updates, you could do a few things.  Use their email address as their
username and leave the email blank or fill it in with some other value. 
Or you could modify the scrip condition to check to see if the user is a
watcher.  There is probably another way of doing that as well...

.r'

___
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com


[rt-users] RT Privileges

2007-05-11 Thread Kenneth Crocker

To all,


	I have a privileges question. I have been working with the 
understanding that ModifyTicket would allow a user to modify any part 
of a ticket, including status and changing Queues, but not adding 
Comments or modifying Custom Fields. Those last two privileges seem to 
be reserved for other rights, CommentOnTicket  Group right 
ModifyCustomField respectively. If I give a user or group the 
ModifyTicket privilege in a Queue, they CANNOT modify a ticket custom 
field (in that Queue) unless that custom field has been applied to that 
Queue AND they are in a group that has the ModifyCustomField privilege 
for that custom field. They CANNOT add a comment to a ticket unless they 
have that right as well. Am I correct in all of these assumptions? Thanks.


Kenn
LBNL
___
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com