<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>AW: Re: [rt-users] Custom Fields and Rights Question / maybe a bug</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>Hi ruslan,<BR>
<BR>
Yes for a normal cf this is not critical, but together with a cf set to mandatory this becomes critical, because the user is not able to create a ticket via gui anymore for this queue :-(<BR>
<BR>
Torsten<BR>
<BR>
-----Original Message-----<BR>
From: ruslan.zakirov@gmail.com <ruslan.zakirov@gmail.com><BR>
To: Ham MI-ID, Torsten Brumm<BR>
CC: rt-users@lists.bestpractical.com <rt-users@lists.bestpractical.com><BR>
Sent: Wed Aug 08 16:13:33 2007<BR>
Subject: Re: [rt-users] Custom Fields and Rights Question / maybe a bug<BR>
<BR>
On 8/8/07, Ham MI-ID, Torsten Brumm <torsten.brumm@kuehne-nagel.com> wrote:<BR>
> Hi RT Users, Developers,<BR>
><BR>
> i'm not 100% sure if this is a bug or if i'm again too dumb...<BR>
><BR>
> For a Custom Field, I can grant the following Group Rights:<BR>
><BR>
> SeeCustomField<BR>
> ModifyCustomField<BR>
> AdminCustomField<BR>
><BR>
> >From my point of understanding, SeeCustomFields allows a user to see the CF and it's content, but not to change it?<BR>
right<BR>
<BR>
><BR>
> ModifyCustomFields grant him the right to change the Content of the CF and AdminCF grants him the right to change this CF, is this correct so far?<BR>
AdminCF allow user to admin a CF, add new possible values, change type...<BR>
ModifyCF allow user to modify value(s) of a CF on tickets or objects<BR>
this particular CF applies to.<BR>
<BR>
><BR>
> If the point above is correct, then if a user that only have the rights SeeCustomField should only be able to see this field and content, but should not be able to change the content?<BR>
right.<BR>
<BR>
><BR>
> OK, now my problem and why I'm thinking that's a bug...<BR>
><BR>
> If a user creates a ticket in a queue with a custom field assigned and he has only the right SeeCustomField at this CF, he should see the field but should not be able to enter something there?!? But he is...!...is this the correct way of handling the ACL or do I something wrong?<BR>
Yeah, there is a small bug on create. User see fields he can see even<BR>
if he can't modify them, but as far as I know user gets 'permission<BR>
denied' after creation for fields he can't modify.<BR>
<BR>
In 3.7 development branch we don't show fields user can't modify on<BR>
the create ticket page anymore. I think we can backport that fix.<BR>
<BR>
><BR>
> Its under RT 3.6.4 and I have double checked the rights, the global rights, group rights and user rights...<BR>
><BR>
> Any Ideas or hints or understand I the rights Setup for CF totally wrong???<BR>
> --<BR>
> Thanks in advance<BR>
> ....<BR>
> : Torsten Brumm<BR>
> :<BR>
> : Kuehne + Nagel<BR>
> : HAM - MI-ID<BR>
> :<BR>
> : Bauerbergweg 23-25<BR>
> : 22111 Hamburg<BR>
> :<BR>
> : +49 (40) 30333 3199<BR>
> : +49 (40) 30333 44 3199<BR>
> :<BR>
> : torsten.brumm@kuehne-nagel.com<BR>
> : www.kn-portal.com<BR>
> : icq: 78258840<BR>
> ....<BR>
><BR>
><BR>
> Kühne + Nagel (AG & Co.) KG, Geschäftsleitung: Hans-Georg Brinkmann (Vors.), Uwe Bielang (Stellv.), Dr. Björn Johansson (Stellv.), Bruno Mang, Alfred Manke, Thorsten Meincke, Mark Reinhardt (Stellv.), Tim Scharwath, Jens Wollesen Sitz: Bremen, Registergericht: Bremen, HRA 21928, USt-IdNr.: DE 812773878, Persönlich haftende Gesellschaft: Kühne & Nagel A.G., Sitz: Contern/LuxemburgGeschäftsführender Verwaltungsrat: Klaus-Michael Kühne<BR>
> _______________________________________________<BR>
> <A HREF="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users">http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</A><BR>
><BR>
> Community help: <A HREF="http://wiki.bestpractical.com">http://wiki.bestpractical.com</A><BR>
> Commercial support: sales@bestpractical.com<BR>
><BR>
><BR>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.<BR>
> Buy a copy at <A HREF="http://rtbook.bestpractical.com">http://rtbook.bestpractical.com</A><BR>
><BR>
<BR>
<BR>
--<BR>
Best regards, Ruslan.<BR>
</FONT>
</P>
</BODY>
</HTML>