[rt-users] Setting up a restricted queue

[Mike Friedman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I think I know the answer to this, but I want to make sure.

I'm going to have to set up a new queue that will be restricted to a small 
set of privileged users.  But I currently have most rights assigned 
globally, to a small set of groups, including 'Everyone' and 'Privileged.

Since there doesn't appear to be a way to *subtract* global rights from 
specific queues, does this mean I have no choice but to replicate all the 
global rights that I don't want to apply to the new restricted queue into 
each of the other queues (and then delete the global rights)?

It would be nice not to have to do this, as we have several queues so it 
can be a tedious process.  I'm wondering if there is a technique I can use 
to avoid this, though I suspect the answer is not what I want to hear.

Thanks.

Mike

_________________________________________________________________________
Mike Friedman                        System and Network Security
mikef at ack.Berkeley.EDU               2484 Shattuck Avenue
1-510-642-1410                       University of California at Berkeley
http://socrates.berkeley.edu/~mikef  http://security.berkeley.edu
_________________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBRLfR8K0bf1iNr4mCEQLd1QCg6U+cTgyT3Zg6jR91smzQ3DTMg0UAmwbC
3VSTGwhxs2O6OWGncPAiGdyo
=qtKQ
-----END PGP SIGNATURE-----