[rt-users] Query Builder Problems

Chris Poupart chris.poupart at mcgill.ca
Thu Jul 19 12:46:14 EDT 2007


I just thought that I would add to this that this only happens (as far 
as I can tell) with the owner field in Build.html.

Other areas with an owner drop down (such as adjusting the information 
for a ticket) only display the users who have OwnTicket rights on that 
queue.

Still... since no unprivileged users have OwnTicket rights... this 
shouldn't be a problem. :-/

-- Chris

Chris Poupart wrote:
> OK,
>
> I just realized that they had "CreateTicket" and "Watch" because of 
> Global group settings.
>
> So I removed all of those permissions as well.  Now when I look at the 
> Rights Matrix for an unprivileged user, they have absolutely no rights.
>
> However, the problem still persists. :(
>
> I appreciate your help.  Looking through my permissions, it seems that 
> it was time for a cleanup anyway!
>
> -- Chris
>
> Drew Barnes wrote:
>> My last suggestion would be to try removing "watch" rights to
>> unprivileged.
>> My rights setup (in case this may help you):
>> Privileged: Steal Ticket, TakeTicket
>> Unpriv'ed: CreateTicket, SeeQueue
>> Everyone: CreateTicket (probably redundant), ReplyToTicket
>> Requestor: ReplyToTicket
>>
>> MyGroup: ModifyTicket, OwnTicket, ShowTicket, ShowTicketComments, Watch,
>> WatchAsAdminCC
>>
>> MyGroup is the only group that appears in the Owner box on my 3.6.4
>> (upgraded from 3.2.2) system.
>>
>> Hope this helps you some.
>>
>>
>> Chris Poupart wrote:
>>  
>>> Unfortunately, this hasn't brought me any closer to resolving the bug.
>>>
>>> If I take a random auto-generated user,  they do not have "OwnTicket"
>>> rights on any of the queues. :(
>>>
>>> So I then went through and removed all of the permissions to the
>>> system defined groups (Everyone, Privileged, Unprivileged, Owner,
>>> AdminCC, CC, etc) for all of the queues.
>>>
>>> Now if I look at an unprivileged auto-created user in the Rights
>>> Matrix, they have "Create Ticket" rights to all of the queues, and
>>> "Watch" rights to all of the queues.  That's it.
>>>
>>> However, I still have the problem that /all/ of the users load when I
>>> bring up the Build.html page. :-/
>>>
>>> If anyone has any other advice on this one, I would love to hear it.
>>>
>>> -- Chris
>>>
>>> Chris Poupart wrote:
>>>    
>>>> Thanks Drew,
>>>>
>>>> I have RTx:RightsMatrix installed, and I am looking through.  So far
>>>> there is nothing obvious, unless I am missing something.
>>>>
>>>> I don't have an over-abundance of queues, so I may just go through
>>>> them and double-check the permissions for groups that would apply to
>>>> everyone (really only the default global groups).
>>>>
>>>> -- chris
>>>>       
>>
>>   
>
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
>
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
> Buy a copy at http://rtbook.bestpractical.com




More information about the rt-users mailing list