[rt-users] Limiting the information unprivileged users are able to see via the webinterface

Joop jvdwege at xs4all.nl
Wed Sep 28 11:08:17 EDT 2011


Lars Braeuer wrote:
> Hello,
>
> is there a way in RT 4.x to reduce the information an unprivileged user can see when he's accessing
> his tickets via the RT webinterface?
>   
Yes, use Callbacks to skip the transactions you don't want.
The Callback you want to add is:
/opt/rt3/local/html/Callbacks/mococo/Ticket/Elements/ShowHistory/SkipTransaction
with SkipTransaction having something like:
<%init>
my $myskip=0;

if ( $Transaction->Type =~ /^(Set|Told)$/ ) {
    if ( $Transaction->Field =~ /^(TimeWorked|Told|Starts|Started|Due)$/ ) {
        $myskip = 1;
    }
    else {
        $myskip = 0;
    }
}
$$skip=$myskip;

</%init>

<%args>
$Transaction => undef
$skip
</%args> 

Which skips the TimeWorked,Told,Starts,Started,Due transactions.
You might want to consider modifying other files in SelfService to not 
show the user who worked on it but to show for example  'helpdesk'.

Greetings,

Joop





More information about the rt-users mailing list