<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jan 4, 2017 at 9:35 AM, Felix Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="m_-3485086365929302112moz-cite-prefix">Le 04/01/2017 à 15:10, Alex Hall a
écrit :<br>
</div>
<blockquote type="cite">
<div dir="ltr">Okay, searching users is the problem? I'm not sure,
but what about an overlay that conditionally shows that part of
page templates? You could create a group to which you'd assign
any user you don't want viewing other users, then find the
element that displays the user search and add a condition to
return nothing if the user belongs to that group?<br>
</div>
</blockquote>
Yes, this is a part of the problem. The second, but not important,
it's just for the look&feel, the ability to custom "Rt at a
glance" by user groups.<br>
<br>
For the first, I don't known how I can do " then find the element
that displays the user search and add a condition to return nothing
if the user belongs to that group"<br>
<br></div></blockquote><div>In one template, I was able to find this snippet to get the user object:<br></div><div>my $user = $session{'CurrentUser'}->UserObj; <br><br></div><div>From there, I imagine you could check if the user is a member of a certain group. Then "return 0" or something like that to stop the element from loading. My Perl skills aren't worthy of being called skills in any way, and I've never tried something quite like this, but it's my first thought. Sorry I can't help more; hopefully a more experienced user has a much simpler solution for you. :)<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF">
<br>
<blockquote type="cite">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Jan 4, 2017 at 8:57 AM, Felix
Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> <br>
<div class="m_-3485086365929302112m_3321512374408554687moz-cite-prefix">Le
04/01/2017 à 14:02, Alex Hall a écrit :<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>Can you describe your setup more? I'm not
sure why unprivileged users would need access to
all queue tickets, or why each user would have
their own queue? As I understand it,
unprivileged users are end users (i.e.
customers, those who don't work for your
organization). Thus, they shouldn't be able to
access an entire queue, only tickets they open.
Make them privileged, and restrict their rights
by adding them to a certain group, and your life
may be a lot easier.<br>
</div>
</div>
</div>
</div>
</blockquote>
Yes! In the begining, that's what I tried to do. Restrict
privilieged users. But I didn't find how restrict the
access to the SearchUser.<br>
<br>
A member of a queue can search and view all users.<br>
<br>
In my setup, a queue and group, are dedicated to a
customer.<br>
<br>
A customer should not be able to fetch other informations
that are not inside of their queue. Thus, not be able to
search all user in RT database..<br>
<br>
Maybe, it's possible to limit the search function to their
queue or desactivate the access to the menu search. Do you
know about that ?<br>
<br>
Thanks,<br>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div><br>
</div>
For example, you might have a group called "basic
users" to which you'd add the users you currently
consider unprivileged. That group would have only
a few rights, but since its members would be
privileged, you wouldn't run into RT's built-in
restrictions.<br>
<br>
</div>
As to one queue per user, that would quickly get
hard to manage. Queues are for organizing tickets
and users. Sure, a queue may have just one user, but
each user shouldn't have their own queue. Trying to
keep track of the rights of such a setup would be a
nightmare, assuming you have a good amount of users.
As an example, we have queues for technology,
warehouse, customer service, and other divisions
within the company. Some queues have a lot of
people, some have a few, butthey are all logical
groupings of tasks. If I made a new queue for every
user, I'd have dozens of them, and tickets would be
all over the place! Plus, there's email to consider;
if you want to accept incoming emails for ticket
replies, you have to make a new Fetchmail or Postfix
entry for every single user/queue you have.<br>
<br>
</div>
I hope this makes some sense. As I said, a lot of this
depends on your usage pattern and setup concept. If
you can explain that to us more, we might be able to
help better.<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Jan 4, 2017 at 3:57
AM, Felix Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><font face="Bitstream Vera Sans">Hello, <br>
</font></p>
<p><font face="Bitstream Vera Sans">You right,
this rights isn't checked. <br>
</font></p>
<p><font face="Bitstream Vera Sans">But I can't
view all tickets in selfservice anymore. <br>
</font></p>
<p><font face="Bitstream Vera Sans">I verify the
same rights in :</font></p>
<p><font face="Bitstream Vera Sans"> Admin >
Queue, "select the queue name" and Group
Rights, select and grant "unprivileged
users" to Seequeue & Showtickets</font></p>
<p><font face="Bitstream Vera Sans">In the same
section: <br>
</font></p>
<p><font face="Bitstream Vera Sans"> grant group
"compagny name" to </font><font face="Bitstream Vera Sans">Seequeue &
Showtickets</font></p>
<p><font face="Bitstream Vera Sans"><br>
But no effect.</font></p>
<p><font face="Bitstream Vera Sans">I try to add
a user to watchers 'CC', and grant watchers
'CC' to </font><font face="Bitstream Vera
Sans">Seequeue & Showtickets but no
effect too :(</font></p>
<p><font face="Bitstream Vera Sans">Another
ideas ?<br>
</font></p>
<p><font face="Bitstream Vera Sans">Thanks, <br>
</font></p>
<p><font face="Bitstream Vera Sans">Félix.<br>
</font></p>
<div class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527moz-cite-prefix">Le
03/01/2017 à 18:39, Alex Hall a écrit :<br>
</div>
<blockquote type="cite">
<div dir="ltr">Have you granted the rights? In
Admin > Global > Group Rights, select
the "unprivileged users" tab, then grant
"view queue". That should help, though our
setup is quite different so I can't verify
it.<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote"><span>On Tue, Jan
3, 2017 at 12:27 PM, Felix Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span>
wrote:<br>
</span>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><span>
<p><font face="Bitstream Vera Sans">Hi
all,</font></p>
<p><font face="Bitstream Vera Sans">I
don't find how I could add
ShowTickets or QueueList in
SelfService.<br>
</font></p>
<p><font face="Bitstream Vera Sans">I
want to allow my unprivileged
users, grouped by company name,
to see all tickets in their
queue. <br>
</font></p>
<p><font face="Bitstream Vera Sans">The
group rights on the queue is
correctly defined and users
could access to the tickets by
entring the ticket number in the
"goto Ticket" field (top right
in SelfService).<br>
</font></p>
<p><font face="Bitstream Vera Sans">I
have tried to play with
CustomRole but it's not working
for me. So anybody known how I
can do it?<br>
</font></p>
</span> Thank you,<span class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527HOEnZb"><font color="#888888"><br>
<pre class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527m_-862211898222835891moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote>
</div>
<br>
<br clear="all">
<span class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font color="#888888"> <br>
-- <br>
<div class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div>Alex Hall<br>
</div>
Automatic Distributors, IT
department<br>
</div>
<a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br>
</div>
</div>
</font></span></div>
<span class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font color="#888888"> </font></span></blockquote>
<span class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font color="#888888"> <br>
<pre class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote>
</div>
<br>
<br clear="all">
<span class="m_-3485086365929302112HOEnZb"><font color="#888888"> <br>
-- <br>
<div class="m_-3485086365929302112m_3321512374408554687gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div>Alex Hall<br>
</div>
Automatic Distributors, IT department<br>
</div>
<a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br>
</div>
</div>
</font></span></div>
<span class="m_-3485086365929302112HOEnZb"><font color="#888888"> </font></span></blockquote>
<span class="m_-3485086365929302112HOEnZb"><font color="#888888"> <br>
<pre class="m_-3485086365929302112m_3321512374408554687moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote>
</div>
<br>
<br clear="all"><span class="HOEnZb"><font color="#888888">
<br>
-- <br>
<div class="m_-3485086365929302112gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div>Alex Hall<br>
</div>
Automatic Distributors, IT department<br>
</div>
<a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br>
</div>
</div>
</font></span></div><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre class="m_-3485086365929302112moz-signature" cols="72">--
Félix Defrance
PGP: 0x0F04DC57</pre>
</font></span></div>
</blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div>Alex Hall<br></div>Automatic Distributors, IT department<br></div><a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br></div></div>
</div></div>