<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Ton,<br>
<br>
You need to change your RT_SiteConfig.pm in etc to turn off
"StrictACL". By turning it off, it allows users from one queue to
"link" to tickets in other Queues that they have no privileges for.
Hope this helps.<br>
<br>
Kenn<br>
LBNL<br>
<br>
On 5/7/2009 11:47 PM, Hoogstraten, Ton wrote:
<blockquote
cite="mid:891469DFBBD7364EB24DEEB101767D86505BDF@nlutxch101.corporate.ingrammicro.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m looking at a point of conflict that I’m
having
with myself and RT. I made an option that makes it easy and quick to
create a DependsOn
ticket in queues where users have SeeQueue/CreateTicket permission for.
People
like to call them SubTickets here. Now the problem is if they don’t
have
ShowTicket permission for the DependsOn ticket they can’t see
information
like status and owner. I can grant that to the Requestor role (since
who
creates the ticket becomes the requestor) But they also want other
members who
have access to the same queue’s as the Requestor to be able to see the
information.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The main info they want to be able to see is
ticket ID, Subject,
Owner and Status. What would be the up and downside if I add that
ticket
information in the display by over-ruling the ACL with the SystemUser?
What possible
other solutions can I look at? I don’t want to give all users the
SeeQueue and ShowTicket Permissions for all queue’s they can create
DependsOn tickets in. If you do that those queue’s will also be
displayed
in their ‘At a glance’ view. Giving them just SeeQueue and
CreateTicket allows them to create a ticket in a different queue
without seeing
further information including the DependsOn information (I just double
checked.
It looks like you can see ID and Owner, but not Subject and Status
without ShowTicket).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Kind regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ton Hoogstraten<o:p></o:p></p>
</div>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
<a class="moz-txt-link-freetext" href="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users">http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</a>
Community help: <a class="moz-txt-link-freetext" href="http://wiki.bestpractical.com">http://wiki.bestpractical.com</a>
Commercial support: <a class="moz-txt-link-abbreviated" href="mailto:sales@bestpractical.com">sales@bestpractical.com</a>
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at <a class="moz-txt-link-freetext" href="http://rtbook.bestpractical.com">http://rtbook.bestpractical.com</a></pre>
</blockquote>
</body>
</html>