<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>AW: Re: Re: [rt-users] Custom Fields and Rights Question / maybe a bug</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>Hmmmm, an new right would not fix the core of the problem....i think this not only occurs on create, this can also hapen at resolve time.<BR>
<BR>
From the workflow point of view we have the situation that a user creates a ticket with only limited rights, later groups working at the same ticket have more rights and have to set this cf, later groups only need to see what happens with this ticket and resolve this...<BR>
<BR>
I think to bypass the mandatory check and only display the cf if needed but with no chance to ut something should be a cleaner solution?!?<BR>
<BR>
Torsten<BR>
<BR>
-----Original Message-----<BR>
From: ruslan.zakirov@gmail.com <ruslan.zakirov@gmail.com><BR>
To: Ham MI-ID, Torsten Brumm<BR>
CC: rt-users@lists.bestpractical.com <rt-users@lists.bestpractical.com><BR>
Sent: Wed Aug 08 18:02:08 2007<BR>
Subject: Re: Re: [rt-users] Custom Fields and Rights Question / maybe a bug<BR>
<BR>
If a CF is mandatory then all users who can create tickets in queues<BR>
CF applies to must have 'ModifyCustomField' right. I think this way.<BR>
Do you have another ideas? At least as I understand this the way it<BR>
work now.<BR>
<BR>
I was thinking about while fixing bug in 3.7 and came to two ideas:<BR>
1) Mandatory CFs must have default value. So when people couldn't set<BR>
a CF then we apply default and the fact that the CF is mandatory<BR>
doesn't prevent creation.<BR>
2) We can add new 'SetCustomFieldOnCreate' right which can be useful<BR>
in many workflows and also admins would be able to allow users to<BR>
create tickets with mandatory fields, but deny changing a field after<BR>
that.<BR>
<BR>
Both ideas are subject of RT 3.8 only, as I said we can only back port<BR>
a patch from 3.8 to avoid confusion of users and admins.<BR>
<BR>
On 8/8/07, Ham MI-ID, Torsten Brumm <torsten.brumm@kuehne-nagel.com> wrote:<BR>
><BR>
><BR>
><BR>
> Hi ruslan,<BR>
><BR>
> Yes for a normal cf this is not critical, but together with a cf set to<BR>
> mandatory this becomes critical, because the user is not able to create a<BR>
> ticket via gui anymore for this queue :-(<BR>
><BR>
> Torsten<BR>
><BR>
><BR>
> -----Original Message-----<BR>
> From: ruslan.zakirov@gmail.com <ruslan.zakirov@gmail.com><BR>
> To: Ham MI-ID, Torsten Brumm<BR>
> CC: rt-users@lists.bestpractical.com<BR>
> <rt-users@lists.bestpractical.com><BR>
> Sent: Wed Aug 08 16:13:33 2007<BR>
> Subject: Re: [rt-users] Custom Fields and Rights Question / maybe a bug<BR>
><BR>
> On 8/8/07, Ham MI-ID, Torsten Brumm <torsten.brumm@kuehne-nagel.com> wrote:<BR>
> > Hi RT Users, Developers,<BR>
> ><BR>
> > i'm not 100% sure if this is a bug or if i'm again too dumb...<BR>
> ><BR>
> > For a Custom Field, I can grant the following Group Rights:<BR>
> ><BR>
> > SeeCustomField<BR>
> > ModifyCustomField<BR>
> > AdminCustomField<BR>
> ><BR>
> > >From my point of understanding, SeeCustomFields allows a user to see the<BR>
> CF and it's content, but not to change it?<BR>
> right<BR>
><BR>
> ><BR>
> > ModifyCustomFields grant him the right to change the Content of the CF<BR>
> and AdminCF grants him the right to change this CF, is this correct so far?<BR>
> AdminCF allow user to admin a CF, add new possible values, change type...<BR>
> ModifyCF allow user to modify value(s) of a CF on tickets or objects<BR>
> this particular CF applies to.<BR>
><BR>
> ><BR>
> > If the point above is correct, then if a user that only have the rights<BR>
> SeeCustomField should only be able to see this field and content, but should<BR>
> not be able to change the content?<BR>
> right.<BR>
><BR>
> ><BR>
> > OK, now my problem and why I'm thinking that's a bug...<BR>
> ><BR>
> > If a user creates a ticket in a queue with a custom field assigned and he<BR>
> has only the right SeeCustomField at this CF, he should see the field but<BR>
> should not be able to enter something there?!? But he is...!...is this the<BR>
> correct way of handling the ACL or do I something wrong?<BR>
> Yeah, there is a small bug on create. User see fields he can see even<BR>
> if he can't modify them, but as far as I know user gets 'permission<BR>
> denied' after creation for fields he can't modify.<BR>
><BR>
> In 3.7 development branch we don't show fields user can't modify on<BR>
> the create ticket page anymore. I think we can backport that fix.<BR>
><BR>
> ><BR>
> > Its under RT 3.6.4 and I have double checked the rights, the global<BR>
> rights, group rights and user rights...<BR>
> ><BR>
> > Any Ideas or hints or understand I the rights Setup for CF totally<BR>
> wrong???<BR>
> > --<BR>
> > Thanks in advance<BR>
> > ....<BR>
> > : Torsten Brumm<BR>
> > :<BR>
> > : Kuehne + Nagel<BR>
> > : HAM - MI-ID<BR>
> > :<BR>
> > : Bauerbergweg 23-25<BR>
> > : 22111 Hamburg<BR>
> > :<BR>
> > : +49 (40) 30333 3199<BR>
> > : +49 (40) 30333 44 3199<BR>
> > :<BR>
> > : torsten.brumm@kuehne-nagel.com<BR>
> > : www.kn-portal.com<BR>
> > : icq: 78258840<BR>
> > ....<BR>
> ><BR>
> ><BR>
> > Kühne + Nagel (AG & Co.) KG, Geschäftsleitung: Hans-Georg Brinkmann<BR>
> (Vors.), Uwe Bielang (Stellv.), Dr. Björn Johansson (Stellv.), Bruno Mang,<BR>
> Alfred Manke, Thorsten Meincke, Mark Reinhardt (Stellv.), Tim Scharwath,<BR>
> Jens Wollesen Sitz: Bremen, Registergericht: Bremen, HRA 21928, USt-IdNr.:<BR>
> DE 812773878, Persönlich haftende Gesellschaft: Kühne & Nagel A.G., Sitz:<BR>
> Contern/LuxemburgGeschäftsführender Verwaltungsrat:<BR>
> Klaus-Michael Kühne<BR>
> > _______________________________________________<BR>
> ><BR>
> <A HREF="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users">http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</A><BR>
> ><BR>
> > Community help: <A HREF="http://wiki.bestpractical.com">http://wiki.bestpractical.com</A><BR>
> > Commercial support: sales@bestpractical.com<BR>
> ><BR>
> ><BR>
> > Discover RT's hidden secrets with RT Essentials from O'Reilly Media.<BR>
> > Buy a copy at <A HREF="http://rtbook.bestpractical.com">http://rtbook.bestpractical.com</A><BR>
> ><BR>
><BR>
><BR>
> --<BR>
> Best regards, Ruslan.<BR>
><BR>
><BR>
><BR>
<BR>
<BR>
--<BR>
Best regards, Ruslan.<BR>
</FONT>
</P>
</BODY>
</HTML>