<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<tt>Using RT </tt><span>3.8.8</span><br>
<br>
On 2011-12-16 17:24, Gerard FENELON wrote:
<blockquote cite="mid:4EEB70C9.4040904@eve-team.com" type="cite">
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
Hi<br>
<br>
One of my privileged users A was able to add another user B as
AdminCc <br>
even though that second User B does not have the WatchAsAdminCc
right as far as I can make out.<br>
<br>
User B is not privileged.<br>
User B does not have any rights for that Queue in
Admin/Queues/UserRights.html<br>
<br>
User B belongs to only one group C directly.<br>
Group C is not included in any other.<br>
Group C does not have any rights in Admin/Groups/GroupRights.html<br>
Group C does not have any rights for that Queue in
Admin/Queues/GroupRights.html<br>
<br>
The WatchAsAdminCc right on that queue is only given to
User-defined groups to which User B does not belong either
directly or indirectly.<br>
<br>
If I look at the RightsMatrix for User B, he does not have
WatchAsAdminCc right on any queue.<br>
If I look at the RightsMatrix for Group C, it does not have
WatchAsAdminCc right on any queue.<br>
<br>
User A has the following rights on that queue C<br>
<ul>
<li>CommentOnTicket</li>
<li>CreateTicket</li>
<li>ModifyTicket</li>
<li>OwnTicket</li>
<li>ReplyToTicket</li>
<li>SeeQueue</li>
<li>ShowACL</li>
<li>ShowOutgoingEmail</li>
<li>ShowTicket</li>
<li>ShowTicketComments</li>
<li>StealTicket</li>
<li>TakeTicket</li>
<li>Watch</li>
<li>WatchAsAdminCc</li>
</ul>
<b><br>
</b>Any ideas where I might have messed up ?<br>
<br>
Gerard</blockquote>
<br>
</body>
</html>