[rt-users] possible permissions (ModifyTicket) bug in 3.4.5?

Joshua Colson jcolson at voidgate.org
Wed Apr 26 15:36:38 EDT 2006


On Wed, 2006-04-26 at 14:16 -0400, Claude M. Schrader wrote:
> Hello,
> We have been removing all global permissions from the Privileged user
> group on our RT install, to let some important customers have access to
> their own support queue. In doing this, we seem to have stumbled on what
> appears to be a bug with the ModifyTicket setting. The user is able to
> search for email addresses through the "People" area of a ticket, and
> return a list of every email address known to rt.
> 

I don't think this is a bug, more like a feature. RT makes the
assumption that Privileged users are just that, privileged.

What it seems you're attempting to do (setup mini-instances using
queues) is not how RT is designed to operate (to my understanding).
However, that being said, you should be able to add your own custom
Rights to handle your situation. There may even be somebody who has done
it already.


-- 
Joshua Colson <jcolson at voidgate.org>




More information about the rt-users mailing list