<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Subb,<br>
<br>
You'd have to look at "Privileged" in both Global Group and user
rights as well as Queue group and user rights. We do not grant rights
to ANY individual users. For us, that would be a maintenance nightmare.
We put individual users in user-defined groups that have the same
access needs. If you have Rights-Matrix, that would tell you exactly
who has what rights and how they got them. Try looking at that and see
what you have. It makes debugging these problems a lot easier.<br>
The thing to keep in mind is that RT will let you grant almost
anything to anyone. However, to keep the nightmares away, it would be
prudent to have a set policy for who should do what in what queues and
set your rights accordingly. If you only have a few users, then you can
get away with a "seat-of-the-pants" process. But if you have many (in
our case hundreds and hundreds) you'll spend more time chasing your
tail trying to find out why someone can/can't do something because
there was no policy guiding you when you granted all those privileges
way back when.<br>
Remember the old saying "if he had brains, he'd be dangerous"?.
Well, think of privileges along the same lines. There are always some
people that find ways to screw up things because no one thought that a
user would do such and such, so they were generous when setting up
privileges. Just a thought.<br>
<br>
Kenn<br>
LBNL<br>
<br>
On 6/1/2009 8:00 AM, Venkateswaran, Subbaraman wrote:
<blockquote
cite="mid:D025D0AB92335E4B90B7ADA30FA3D59504570FF8@PCCPMEXV02.na.blkint.com"
type="cite">
<title>Search page Owners drop-down</title>
<meta http-equiv="Content-Type" content="text/html; ">
<meta content="MSHTML 6.00.2900.3527" name="GENERATOR">
<div dir="ltr" align="left"><span class="255245914-01062009"><font
color="#0000ff" face="Trebuchet MS" size="2">I verified the permission
of "OwnTicket" and it is not assigned to Everyone group. Is there any
other perms/location I should look into? Thanks.</font></span></div>
<div> </div>
<!-- Converted from text/rtf format -->
<p><span lang="en-us"><font face="Trebuchet MS" size="2">Thanks</font></span>
<br>
<span lang="en-us"><font face="Trebuchet MS" size="2">Subba
Venkateswaran </font></span><br>
<span lang="en-us"><font face="Trebuchet MS" size="1">A&T - App
Eng - SEG</font></span> <br>
<span lang="en-us"><font face="Trebuchet MS" size="1">609 282 7015</font></span>
</p>
<div> </div>
<br>
<div class="OutlookMessageHeader" dir="ltr" align="left" lang="en-us">
<hr tabindex="-1"><font face="Tahoma" size="2"><b>From:</b> Ken
Crocker [<a class="moz-txt-link-freetext" href="mailto:kfcrocker@lbl.gov">mailto:kfcrocker@lbl.gov</a>] <br>
<b>Sent:</b> Wednesday, May 20, 2009 12:58 PM<br>
<b>To:</b> Venkateswaran, Subbaraman<br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:rt-users@lists.bestpractical.com">rt-users@lists.bestpractical.com</a><br>
<b>Subject:</b> Re: [rt-users] Search page Owners drop-down<br>
</font><br>
</div>
Subb,<br>
<br>
Most likely, you have a very "Liberal" application of the
"OwnTicket" right. For example, if you let just about anyone create a
ticket AND you have given the "OwnTicket" right to "Everyone" Globally,
then guess what? Every ticket that exists in every queue will most
likely have a REALLY long list of possible owners. This will also kick
your Query/search speed into granny low. Try breaking down the
privileges you have into something with more granularity.<br>
<br>
Kenn<br>
LBNL<br>
<br>
On 5/19/2009 6:17 AM, Venkateswaran, Subbaraman wrote:
<blockquote
cite="mid:D025D0AB92335E4B90B7ADA30FA3D59504570F49@PCCPMEXV02.na.blkint.com"
type="cite">
<meta content="MS Exchange Server version 6.5.7654.12"
name="Generator">
<!-- Converted from text/rtf format -->
<p><font face="Trebuchet MS" size="2">Can someone please explain
why we see all kinds of emails, junk in addition to Login IDs in the
Owners drop-down in RT search page? Is there a way we can control or
maintain this, please? This is screwing up people's RT search on
tickets based on owners.</font></p>
<p><font face="Trebuchet MS" size="2">Thanks a lot.</font> </p>
<br>
THE INFORMATION CONTAINED IN THIS MESSAGE AND ANY ATTACHMENT MAY BE
PRIVILEGED, CONFIDENTIAL, PROPRIETARY OR OTHERWISE PROTECTED FROM
DISCLOSURE. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination,
distribution, copying or use of this message and any attachment is
strictly prohibited. If you have received this message in error, please
notify us immediately by replying to the message and permanently delete
it from your computer and destroy any printout thereof.<br>
<pre wrap=""><hr size="4" width="90%">
_______________________________________________
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users">http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</a>
Community help: <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://wiki.bestpractical.com">http://wiki.bestpractical.com</a>
Commercial support: <a moz-do-not-send="true"
class="moz-txt-link-abbreviated" href="mailto:sales@bestpractical.com">sales@bestpractical.com</a>
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://rtbook.bestpractical.com">http://rtbook.bestpractical.com</a></pre>
</blockquote>
<br>
THE INFORMATION CONTAINED IN THIS MESSAGE AND ANY ATTACHMENT MAY BE
PRIVILEGED, CONFIDENTIAL, PROPRIETARY OR OTHERWISE PROTECTED FROM
DISCLOSURE. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination,
distribution, copying or use of this message and any attachment is
strictly prohibited. If you have received this message in error, please
notify us immediately by replying to the message and permanently delete
it from your computer and destroy any printout thereof.<br>
</blockquote>
</body>
</html>