[rt-users] Control

Jesse jesse at fsck.com
Mon Jul 2 22:46:48 EDT 2001


Well, you can grant createuser to both managers and then only grant 
"AdminACL" to each manager for his respective queue. that should do
about what you want.

        -j


On Tue, Jul 03, 2001 at 10:22:38AM +1000, Teo de Hesselle wrote:
> Jesse wrote:
> 
> > > 3) As I mentioned, Several departments use RT, and at the moment I have
> > > several seperate instances of RT installed. I'd much prefer to maintain
> > > one single database, and still be able to delegate user account control to
> > > the appropriate supervisors in the departments concerned, *without* them
> > > being able to mess with the other queue's settings. Is this even remotely
> > > possible?
> > >
> > 
> > The access control system is pretty flexible, but I'd need to know waht you mean by 'user account control' before I could give you a reasonable answer.
> 
> Quick example:
> 
> I set up two queues, "A" and "B". There are 2xN users, A1, A2... AN (and B
> 1..N).
> 
> There are also two managers, M-A and M-B.
> 
> Managers A and B are from completely seperate departments. Each of them
> manage 20-40 staff, some of which are full time, with a considerable
> turnover of casuals.
> 
> What I'd like for Manager A to be able to create users, but restrict
> Manager A and their spawn to queue A, and preferably have them unaware of
> queue B's existence. Is it possible to grant 'Create User' access to an
> account, but have it's access restricted to a subset of the creator's
> priveliges.
> 
> I hope that's clear. Ideas? 
> 
> btw, thanks for the keywords explanation - I'll have a play with my shiny
> new test install.
> 
> -- 
> Téo de Hesselle,                 | Diplomacy is about surviving until
> Unix Systems Administrator       | the next century.  Politics is 
>                                  | about surviving until Friday 
> University of Technology, Sydney | afternoon.        -- Yes, Minister
> 

-- 
jesse reed vincent -- root at eruditorum.org -- jesse at fsck.com 
70EBAC90: 2A07 FC22 7DB4 42C1 9D71 0108 41A3 3FB3 70EB AC90

And I'm told we do share some common rituals. Our "flame war" is apparently 
held in person in their land and called "project meeting".
					-Alan Cox [on "Suits"]




More information about the rt-users mailing list