<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.5346.5" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=636174812-02052006>I'd look at option #1. Seems viable considering that
the ACLs tables seems to be limited to Groups/Queues/CF objects. Just impose a
control on changes to perms on those objects during testing periods. Oh, and
make sure you have a before snapshot before you roll your changes
over....</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV><FONT face=Arial
size=2>
<DIV class=Section1 align=left>
<P class=MsoNormal align=left><FONT face=Arial size=2>Michael Eraņa,
CISSP<BR>CTO<BR>PC Network,
Inc. <BR><A
href="mailto:eranam@lanusa.com">eranam@lanusa.com</A>
</FONT></P></DIV></FONT>
<DIV> </DIV><BR>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> rt-users-bounces@lists.bestpractical.com
[mailto:rt-users-bounces@lists.bestpractical.com] <B>On Behalf Of </B>Philip
Kime<BR><B>Sent:</B> Monday, May 01, 2006 5:31 PM<BR><B>To:</B>
rt-users@lists.bestpractical.com<BR><B>Subject:</B> [rt-users] Reset all ACLs
to something sensible<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial
size=2>Greetings,</FONT></SPAN></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial size=2> I
have an "organically grown" RT system with a rat's nest of a rights matrix. I
want to clean this out and start again. I have designed and tested a new set
of rights for everyone but I'm wondering as to the best way of getting this
implemented. I have the luxury of a development box that I can load snapshots
of production onto. I can see the following possibilities:</FONT></SPAN></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial size=2>* Dump PROD onto
DEV, change things, dump ACL table on DEV and import to PROD. But this means
PROD has to remain static while this is done otherwise horrible things will
happen because of changes to table indices etc. I can't see PROD not being
used while this is done so I doubt I can do this.</FONT></SPAN></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial size=2>* Manually
altering all the PROD ACLs. Will take hours. Horrible but
safe.</FONT></SPAN></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial size=2>* Some sort of API
on top of SQL like the rt command line to remove, replace and re-define
rights?</FONT></SPAN></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial size=2>* Manual SQL
stuff. Shudder.</FONT></SPAN></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial size=2>Any
ideas?</FONT></SPAN></DIV>
<DIV><SPAN class=253102721-01052006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV align=left><FONT face=Arial size=2>--</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>Philip Kime</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>NOPS Systems Architect</FONT></DIV>
<DIV align=left><FONT face=Arial size=2>310 401 0407</FONT></DIV>
<DIV> </DIV></BLOCKQUOTE></BODY></HTML>