<div dir="ltr">I did that query and it returned 26 rows.<div>All of the returned rows say the PrinicpalType is Group, which I would assume means the 'OwnTicket' right is not granted to a specific user anywhere in RT.<br><div><br></div><div><br></div><div>I didn't want to make that assumption, just in case it was incorrect, so I took a look at the data schema for 3.8.10, which I believe is here: <a href="http://bestpractical.com/rt/3.4-schema.png">http://bestpractical.com/rt/3.4-schema.png</a> (note** My SQL skills are extremely rusty... been working in a Unidata database for 13-14 yrs)</div><div><br></div><div>It looks like ACL.PrincipalId is a foreign key to Principals, and id is the primary key for Principals and Users?</div><div><br></div><div>With that scenario, I ran a query linking them all together and attempting to return user info for any of the 26 rows from the original query. No user info is returned for any of them (query used below)</div><div><div>mysql> select <a href="http://p.id">p.id</a>,p.PrincipalType,u.Name,u.EmailAddress,u.RealName</div><div> -> from Principals p</div><div> -> left join ACL a on a.PrincipalId = <a href="http://p.id">p.id</a></div><div> -> left join Users u on <a href="http://u.id">u.id</a> = <a href="http://p.id">p.id</a></div><div> -> where a.RightName='OwnTicket';</div></div><div><br></div><div><br></div><div>Just for a wild attempt at getting what I was expecting based on Kevin's response (I wanted to see 5 users that had the 'OwnTicket' right) I tried switching to ACL.id as a foreign key. It returned only 9 rows, only 2 of which were users, but neither were the users that are showing up in the Owner dropdown that shouldn't be. I believe this was just chance, garbage data, as I believe the first query showed the real results, but I was fishing...</div></div><div><br></div><div>With this information I did some more investigating to understand the symptom better. It looks like these users only show up in the owner dropdown of Queues that existed prior to our upgrade from 3.2.1 -> 3.8.10.</div><div><br></div><div>Could there have been something missed in this upgrade?</div><div><br></div><div>Thanks!</div><div>Mike.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Oct 14, 2014 at 12:56 PM, Kevin Falcone <span dir="ltr"><<a href="mailto:falcone@bestpractical.com" target="_blank">falcone@bestpractical.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Fri, Oct 10, 2014 at 01:47:59PM -0400, Mike Johnson wrote:<br>
> I look at the list of owners for a queue, and there are 5 users that show up in<br>
> that list(that shouldn't be there), but when I go to their account, they aren't<br>
> part of any groups, and they don't have any rights assigned to them<br>
> specifically that I can see(at the user level, or at any queue level).<br>
<br>
</span>Generally this means some queue granted OwnTicket to Unprivileged,<br>
check all your queues, even your disabled ones. Alternately, select *<br>
from ACL where RightName = 'OwnTicket' and work the other way.<br>
<br>
RT 4.2 explicitly excludes Unprivileged users from the OwnTicket<br>
dropdown because of this someone common mistake.<br>
<span class="HOEnZb"><font color="#888888"><br>
-kevin<br>
</font></span><br>--<br>
RT Training November 4 & 5 Los Angeles<br>
<a href="http://bestpractical.com/training" target="_blank">http://bestpractical.com/training</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Mike Johnson<br>Datatel Programmer/Analyst<br>Northern Ontario School of Medicine<br>955 Oliver Road<br>Thunder Bay, ON P7B 5E1<br>Phone: (807) 766-7331<br>Email: <a href="mailto:mike.johnson@nosm.ca">mike.johnson@nosm.ca</a>
</div>