<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Scott,<br>
<br>
Yea. I can see that. We kind of went around that by the way we use LDAP
for our sign-ons. It doesn't matter what they do to their password in
"Preferences", it always gets overridden by LDAP. In other words, they
can't screw it up.<br>
<br>
Kenn<br>
LBNL<br>
<br>
On 10/1/2009 10:02 AM, Lander, Scott wrote:
<blockquote
cite="mid:39A20BAEB14A6344A0646DD5C8F98D4B06979D6849@RCLTEXCMS02.resource.hearstcorp.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta content="MSHTML 6.00.2900.3157" name="GENERATOR">
<div dir="ltr" align="left"><font color="#0000ff" face="Arial"
size="2"><span class="776115416-01102009">Ken, Thanks for your reply.</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial"
size="2"><span class="776115416-01102009"></span></font> </div>
<div dir="ltr" align="left"><font color="#0000ff" face="Arial"
size="2"><span class="776115416-01102009">My setup is similar -
actually - identical. Although I have given, globally to privileged
users, the rights CreateSavedSearch, EditSavedSearch and
ShowSavedSearch along with all other rights, they still can't actually
save a search unless I also give them ModifySelf (which presents the
preferences tab that I don't want them to have....)</span></font></div>
<br>
<div class="OutlookMessageHeader" dir="ltr" align="left" lang="en-us">
<hr tabindex="-1"><font face="Tahoma" size="2"><b>From:</b> Ken
Crocker [<a class="moz-txt-link-freetext" href="mailto:kfcrocker@lbl.gov">mailto:kfcrocker@lbl.gov</a>] <br>
<b>Sent:</b> Thursday, October 01, 2009 12:39 PM<br>
<b>To:</b> Lander, Scott<br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:rt-users@lists.bestpractical.com">rt-users@lists.bestpractical.com</a><br>
<b>Subject:</b> Re: [rt-users] User right to save searches<br>
</font><br>
</div>
Scott,<br>
<br>
We grant all the Create, save, edit, etc. search rights to all
privileged users at the global level. Since we only grant the
"SeeQueue", "CreatTicket", & "ShowTicket" rights to a queue at the
Queue level only, by granting the search rights globally, the actual
queues they can sees defers to the rights granted at the Queue level.
Much less maintenance AND everyone has all the "search" rights to
whatever Queue they can see. Hope this helps.<br>
<br>
Kenn<br>
LBNL<br>
<br>
On 10/1/2009 8:37 AM, Lander, Scott wrote:
<blockquote
cite="mid:39A20BAEB14A6344A0646DD5C8F98D4B06979D67FC@RCLTEXCMS02.resource.hearstcorp.com"
type="cite">
<meta content="Microsoft Exchange Server" name="Generator">
<!-- converted from rtf -->
<style>.EmailQuote {
PADDING-LEFT: 4pt; MARGIN-LEFT: 1pt; BORDER-LEFT: #800000 2px solid
}
</style> <font face="Arial, sans-serif" size="2">
<div>It appears that for a user to be able to save their searches,
I have to give them rights to the preferences tab. I really don't
want them to be able to, for instance, change their passwords, which is
under the preferences tab (they authenticate via ldap, and this would
change the local password - it would get confusing….)</div>
<div> </div>
<div>Am I missing something obvious?</div>
<div> </div>
<div>Thanks</div>
<div>Scott</div>
<div> </div>
<div> </div>
</font>
<pre>------------------------------------------------------------------------------------
This e-mail message is intended only for the personal use of the recipient(s) named above. If you are not an intended recipient, you may not review, copy or distribute this message. If you have received this communication in error, please notify the Hearst Service Center (<a
moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:cadmin@hearstsc.com">cadmin@hearstsc.com</a>) immediately by email and delete the original message.
------------------------------------------------------------------------------------
</pre>
<pre wrap=""><hr size="4" width="90%">
_______________________________________________
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users">http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</a>
Community help: <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://wiki.bestpractical.com">http://wiki.bestpractical.com</a>
Commercial support: <a moz-do-not-send="true"
class="moz-txt-link-abbreviated" href="mailto:sales@bestpractical.com">sales@bestpractical.com</a>
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://rtbook.bestpractical.com">http://rtbook.bestpractical.com</a></pre>
</blockquote>
<pre>------------------------------------------------------------------------------------
This e-mail message is intended only for the personal use of the recipient(s) named above. If you are not an intended recipient, you may not review, copy or distribute this message. If you have received this communication in error, please notify the Hearst Service Center (<a class="moz-txt-link-abbreviated" href="mailto:cadmin@hearstsc.com">cadmin@hearstsc.com</a>) immediately by email and delete the original message.
------------------------------------------------------------------------------------
</pre>
</blockquote>
</body>
</html>