[rt-users] Possible RTFM rights bug

[Joshua Colson]

On Tue, 2006-04-18 at 13:20 -0400, Phil Smith III wrote:
> I'm configuring RTFM on RT 3.6.0pre1.
> 
> All my internal users are members of a group called Internal, and that group has global rights to queues.
> 
> I have a user that's for an external customer login; let's call it xyz.  That user can be assigned rights, is NOT a member of Internal, and has SeeClass and ShowArticle rights to one of the RTFM classes.  The user has no Global rights, either in RTFM or RT.
> 
> BUT the user can create RTFM articles in that class!  Shouldn't he need the CreateArticle right to do so?
> 
> I'm willing to believe I've done something dumb, but I checked all this twice (I think!).  Is there a good way to diagnose rights issues like this?
> 
> Thanks,
> ...phsiii

Although I've not used it, there is an extension
(http://wiki.bestpractical.com/index.cgi?WhoHasRightsToWhat) that is
supposed to do show you who has rights to what.

HTH

-- 
Joshua Colson <jcolson at voidgate.org>