<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">Le 04/01/2017 à 15:47, Alex Hall a
écrit :<br>
</div>
<blockquote
cite="mid:CA+Q8_Jd6buP4RPFytvjWLc5SdkFX81h239oPa7xqQ3kNYDBPjQ@mail.gmail.com"
type="cite">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Jan 4, 2017 at 9:35 AM, Felix
Defrance <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="m_-3485086365929302112moz-cite-prefix">Le
04/01/2017 à 15:10, Alex Hall a écrit :<br>
</div>
<blockquote type="cite">
<div dir="ltr">Okay, searching users is the problem?
I'm not sure, but what about an overlay that
conditionally shows that part of page templates? You
could create a group to which you'd assign any user
you don't want viewing other users, then find the
element that displays the user search and add a
condition to return nothing if the user belongs to
that group?<br>
</div>
</blockquote>
Yes, this is a part of the problem. The second, but not
important, it's just for the look&feel, the ability
to custom "Rt at a glance" by user groups.<br>
<br>
For the first, I don't known how I can do " then find
the element that displays the user search and add a
condition to return nothing if the user belongs to that
group"<br>
<br>
</div>
</blockquote>
<div>In one template, I was able to find this snippet to get
the user object:<br>
</div>
<div>my $user = $session{'CurrentUser'}->UserObj; <br>
<br>
</div>
<div>From there, I imagine you could check if the user is a
member of a certain group. Then "return 0" or something
like that to stop the element from loading. My Perl skills
aren't worthy of being called skills in any way, and I've
never tried something quite like this, but it's my first
thought. Sorry I can't help more; hopefully a more
experienced user has a much simpler solution for you. :)<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
Do you know if the menu search come from :
rt/share/html/Dashboards/Elements/* ? Or from another file ?<br>
<br>
I don't find documentation about these files and what are they doing
:(<br>
<br>
Thanks<br>
<br>
<blockquote
cite="mid:CA+Q8_Jd6buP4RPFytvjWLc5SdkFX81h239oPa7xqQ3kNYDBPjQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> <br>
<blockquote type="cite">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Jan 4, 2017 at 8:57
AM, Felix Defrance <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:felix@d2france.fr"
target="_blank">felix@d2france.fr</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0
0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> <br>
<div
class="m_-3485086365929302112m_3321512374408554687moz-cite-prefix">Le
04/01/2017 à 14:02, Alex Hall a écrit :<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>Can you describe your setup more?
I'm not sure why unprivileged users
would need access to all queue
tickets, or why each user would have
their own queue? As I understand it,
unprivileged users are end users
(i.e. customers, those who don't
work for your organization). Thus,
they shouldn't be able to access an
entire queue, only tickets they
open. Make them privileged, and
restrict their rights by adding them
to a certain group, and your life
may be a lot easier.<br>
</div>
</div>
</div>
</div>
</blockquote>
Yes! In the begining, that's what I tried to
do. Restrict privilieged users. But I didn't
find how restrict the access to the
SearchUser.<br>
<br>
A member of a queue can search and view all
users.<br>
<br>
In my setup, a queue and group, are dedicated
to a customer.<br>
<br>
A customer should not be able to fetch other
informations that are not inside of their
queue. Thus, not be able to search all user in
RT database..<br>
<br>
Maybe, it's possible to limit the search
function to their queue or desactivate the
access to the menu search. Do you know about
that ?<br>
<br>
Thanks,<br>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div><br>
</div>
For example, you might have a group
called "basic users" to which you'd
add the users you currently consider
unprivileged. That group would have
only a few rights, but since its
members would be privileged, you
wouldn't run into RT's built-in
restrictions.<br>
<br>
</div>
As to one queue per user, that would
quickly get hard to manage. Queues are
for organizing tickets and users. Sure,
a queue may have just one user, but each
user shouldn't have their own queue.
Trying to keep track of the rights of
such a setup would be a nightmare,
assuming you have a good amount of
users. As an example, we have queues for
technology, warehouse, customer service,
and other divisions within the company.
Some queues have a lot of people, some
have a few, butthey are all logical
groupings of tasks. If I made a new
queue for every user, I'd have dozens of
them, and tickets would be all over the
place! Plus, there's email to consider;
if you want to accept incoming emails
for ticket replies, you have to make a
new Fetchmail or Postfix entry for every
single user/queue you have.<br>
<br>
</div>
I hope this makes some sense. As I said, a
lot of this depends on your usage pattern
and setup concept. If you can explain that
to us more, we might be able to help
better.<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Jan 4,
2017 at 3:57 AM, Felix Defrance <span
dir="ltr"><<a
moz-do-not-send="true"
href="mailto:felix@d2france.fr"
target="_blank">felix@d2france.fr</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><font face="Bitstream Vera Sans">Hello,
<br>
</font></p>
<p><font face="Bitstream Vera Sans">You
right, this rights isn't
checked. <br>
</font></p>
<p><font face="Bitstream Vera Sans">But
I can't view all tickets in
selfservice anymore. <br>
</font></p>
<p><font face="Bitstream Vera Sans">I
verify the same rights in :</font></p>
<p><font face="Bitstream Vera Sans"> Admin
> Queue, "select the queue
name" and Group Rights, select
and grant "unprivileged users"
to Seequeue & Showtickets</font></p>
<p><font face="Bitstream Vera Sans">In
the same section: <br>
</font></p>
<p><font face="Bitstream Vera Sans"> grant
group "compagny name" to </font><font
face="Bitstream Vera Sans">Seequeue
& Showtickets</font></p>
<p><font face="Bitstream Vera Sans"><br>
But no effect.</font></p>
<p><font face="Bitstream Vera Sans">I
try to add a user to watchers
'CC', and grant watchers 'CC' to
</font><font face="Bitstream Vera
Sans">Seequeue & Showtickets
but no effect too :(</font></p>
<p><font face="Bitstream Vera Sans">Another
ideas ?<br>
</font></p>
<p><font face="Bitstream Vera Sans">Thanks,
<br>
</font></p>
<p><font face="Bitstream Vera Sans">Félix.<br>
</font></p>
<div
class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527moz-cite-prefix">Le
03/01/2017 à 18:39, Alex Hall a
écrit :<br>
</div>
<blockquote type="cite">
<div dir="ltr">Have you granted
the rights? In Admin > Global
> Group Rights, select the
"unprivileged users" tab, then
grant "view queue". That should
help, though our setup is quite
different so I can't verify it.<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote"><span>On
Tue, Jan 3, 2017 at 12:27
PM, Felix Defrance <span
dir="ltr"><<a
moz-do-not-send="true"
href="mailto:felix@d2france.fr"
target="_blank">felix@d2france.fr</a>></span>
wrote:<br>
</span>
<blockquote
class="gmail_quote"
style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div text="#000000"
bgcolor="#FFFFFF"><span>
<p><font face="Bitstream
Vera Sans">Hi all,</font></p>
<p><font face="Bitstream
Vera Sans">I don't
find how I could add
ShowTickets or
QueueList in
SelfService.<br>
</font></p>
<p><font face="Bitstream
Vera Sans">I want to
allow my
unprivileged users,
grouped by company
name, to see all
tickets in their
queue. <br>
</font></p>
<p><font face="Bitstream
Vera Sans">The group
rights on the queue
is correctly defined
and users could
access to the
tickets by entring
the ticket number in
the "goto Ticket"
field (top right in
SelfService).<br>
</font></p>
<p><font face="Bitstream
Vera Sans">I have
tried to play with
CustomRole but it's
not working for me.
So anybody known how
I can do it?<br>
</font></p>
</span> Thank you,<span
class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527HOEnZb"><font
color="#888888"><br>
<pre class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527m_-862211898222835891moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote>
</div>
<br>
<br clear="all">
<span
class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font
color="#888888"> <br>
-- <br>
<div
class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527gmail_signature"
data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div>Alex Hall<br>
</div>
Automatic
Distributors, IT
department<br>
</div>
<a
moz-do-not-send="true"
href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br>
</div>
</div>
</font></span></div>
<span
class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font
color="#888888"> </font></span></blockquote>
<span
class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font
color="#888888"> <br>
<pre class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote>
</div>
<br>
<br clear="all">
<span class="m_-3485086365929302112HOEnZb"><font
color="#888888"> <br>
-- <br>
<div
class="m_-3485086365929302112m_3321512374408554687gmail_signature"
data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div>Alex Hall<br>
</div>
Automatic Distributors, IT
department<br>
</div>
<a moz-do-not-send="true"
href="mailto:ahall@autodist.com"
target="_blank">ahall@autodist.com</a><br>
</div>
</div>
</font></span></div>
<span class="m_-3485086365929302112HOEnZb"><font
color="#888888"> </font></span></blockquote>
<span class="m_-3485086365929302112HOEnZb"><font
color="#888888"> <br>
<pre class="m_-3485086365929302112m_3321512374408554687moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote>
</div>
<br>
<br clear="all">
<span class="HOEnZb"><font color="#888888"> <br>
-- <br>
<div
class="m_-3485086365929302112gmail_signature"
data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div>Alex Hall<br>
</div>
Automatic Distributors, IT department<br>
</div>
<a moz-do-not-send="true"
href="mailto:ahall@autodist.com"
target="_blank">ahall@autodist.com</a><br>
</div>
</div>
</font></span></div>
<span class="HOEnZb"><font color="#888888"> </font></span></blockquote>
<span class="HOEnZb"><font color="#888888"> <br>
<pre class="m_-3485086365929302112moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div>Alex Hall<br>
</div>
Automatic Distributors, IT department<br>
</div>
<a moz-do-not-send="true" href="mailto:ahall@autodist.com"
target="_blank">ahall@autodist.com</a><br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</body>
</html>