<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jan 4, 2017 at 9:35 AM, Felix Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div text="#000000" bgcolor="#FFFFFF">
    <p><br>
    </p>
    <div class="m_-3485086365929302112moz-cite-prefix">Le 04/01/2017 à 15:10, Alex Hall a
      écrit :<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">Okay, searching users is the problem? I'm not sure,
        but what about an overlay that conditionally shows that part of
        page templates? You could create a group to which you'd assign
        any user you don't want viewing other users, then find the
        element that displays the user search and add a condition to
        return nothing if the user belongs to that group?<br>
      </div>
    </blockquote>
    Yes, this is a part of the problem. The second, but not important,
    it's just for the look&feel, the ability to custom "Rt at a
    glance" by user groups.<br>
    <br>
    For the first, I don't known how I can do " then find the element
    that displays the user search and add a condition to return nothing
    if the user belongs to that group"<br>
    <br></div></blockquote><div>In one template, I was able to find this snippet to get the user object:<br></div><div>my $user = $session{'CurrentUser'}->UserObj; <br><br></div><div>From there, I imagine you could check if the user is a member of a certain group. Then "return 0" or something like that to stop the element from loading. My Perl skills aren't worthy of being called skills in any way, and I've never tried something quite like this, but it's my first thought. Sorry I can't help more; hopefully a more experienced user has a much simpler solution for you. :)<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF">
    <br>
    <blockquote type="cite">
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Wed, Jan 4, 2017 at 8:57 AM, Felix
          Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div text="#000000" bgcolor="#FFFFFF"> <br>
              <div class="m_-3485086365929302112m_3321512374408554687moz-cite-prefix">Le
                04/01/2017 à 14:02, Alex Hall a écrit :<br>
              </div>
              <blockquote type="cite">
                <div dir="ltr">
                  <div>
                    <div>
                      <div>Can you describe your setup more? I'm not
                        sure why unprivileged users would need access to
                        all queue tickets, or why each user would have
                        their own queue? As I understand it,
                        unprivileged users are end users (i.e.
                        customers, those who don't work for your
                        organization). Thus, they shouldn't be able to
                        access an entire queue, only tickets they open.
                        Make them privileged, and restrict their rights
                        by adding them to a certain group, and your life
                        may be a lot easier.<br>
                      </div>
                    </div>
                  </div>
                </div>
              </blockquote>
              Yes! In the begining, that's what I tried to do. Restrict
              privilieged users. But I didn't find how restrict the
              access to the SearchUser.<br>
              <br>
              A member of a queue can search and view all users.<br>
              <br>
              In my setup, a queue and group, are dedicated to a
              customer.<br>
              <br>
              A customer should not be able to fetch other informations
              that are not inside of their queue. Thus, not be able to
              search all user in RT database..<br>
              <br>
              Maybe, it's possible to limit the search function to their
              queue or desactivate the access to the menu search. Do you
              know about that ?<br>
              <br>
              Thanks,<br>
              <blockquote type="cite">
                <div dir="ltr">
                  <div>
                    <div>
                      <div><br>
                      </div>
                      For example, you might have a group called "basic
                      users" to which you'd add the users you currently
                      consider unprivileged. That group would have only
                      a few rights, but since its members would be
                      privileged, you wouldn't run into RT's built-in
                      restrictions.<br>
                      <br>
                    </div>
                    As to one queue per user, that would quickly get
                    hard to manage. Queues are for organizing tickets
                    and users. Sure, a queue may have just one user, but
                    each user shouldn't have their own queue. Trying to
                    keep track of the rights of such a setup would be a
                    nightmare, assuming you have a good amount of users.
                    As an example, we have queues for technology,
                    warehouse, customer service, and other divisions
                    within the company. Some queues have a lot of
                    people, some have a few, butthey are all logical
                    groupings of tasks. If I made a new queue for every
                    user, I'd have dozens of them, and tickets would be
                    all over the place! Plus, there's email to consider;
                    if you want to accept incoming emails for ticket
                    replies, you have to make a new Fetchmail or Postfix
                    entry for every single user/queue you have.<br>
                    <br>
                  </div>
                  I hope this makes some sense. As I said, a lot of this
                  depends on your usage pattern and setup concept. If
                  you can explain that to us more, we might be able to
                  help better.<br>
                </div>
                <div class="gmail_extra"><br>
                  <div class="gmail_quote">On Wed, Jan 4, 2017 at 3:57
                    AM, Felix Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span>
                    wrote:<br>
                    <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                      <div text="#000000" bgcolor="#FFFFFF">
                        <p><font face="Bitstream Vera Sans">Hello, <br>
                          </font></p>
                        <p><font face="Bitstream Vera Sans">You right,
                            this rights isn't checked. <br>
                          </font></p>
                        <p><font face="Bitstream Vera Sans">But I can't
                            view all tickets in selfservice anymore. <br>
                          </font></p>
                        <p><font face="Bitstream Vera Sans">I verify the
                            same rights in :</font></p>
                        <p><font face="Bitstream Vera Sans"> Admin >
                            Queue, "select the queue name" and  Group
                            Rights, select and grant "unprivileged
                            users" to Seequeue & Showtickets</font></p>
                        <p><font face="Bitstream Vera Sans">In the same
                            section: <br>
                          </font></p>
                        <p><font face="Bitstream Vera Sans"> grant group
                            "compagny name" to </font><font face="Bitstream Vera Sans">Seequeue &
                            Showtickets</font></p>
                        <p><font face="Bitstream Vera Sans"><br>
                            But no effect.</font></p>
                        <p><font face="Bitstream Vera Sans">I try to add
                            a user to watchers 'CC', and grant watchers
                            'CC' to </font><font face="Bitstream Vera
                            Sans">Seequeue & Showtickets but no
                            effect too :(</font></p>
                        <p><font face="Bitstream Vera Sans">Another
                            ideas ?<br>
                          </font></p>
                        <p><font face="Bitstream Vera Sans">Thanks, <br>
                          </font></p>
                        <p><font face="Bitstream Vera Sans">Félix.<br>
                          </font></p>
                        <div class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527moz-cite-prefix">Le
                          03/01/2017 à 18:39, Alex Hall a écrit :<br>
                        </div>
                        <blockquote type="cite">
                          <div dir="ltr">Have you granted the rights? In
                            Admin > Global > Group Rights, select
                            the "unprivileged users" tab, then grant
                            "view queue". That should help, though our
                            setup is quite different so I can't verify
                            it.<br>
                          </div>
                          <div class="gmail_extra"><br>
                            <div class="gmail_quote"><span>On Tue, Jan
                                3, 2017 at 12:27 PM, Felix Defrance <span dir="ltr"><<a href="mailto:felix@d2france.fr" target="_blank">felix@d2france.fr</a>></span>
                                wrote:<br>
                              </span>
                              <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                                <div text="#000000" bgcolor="#FFFFFF"><span>
                                    <p><font face="Bitstream Vera Sans">Hi
                                        all,</font></p>
                                    <p><font face="Bitstream Vera Sans">I
                                        don't find how I could add
                                        ShowTickets or QueueList in
                                        SelfService.<br>
                                      </font></p>
                                    <p><font face="Bitstream Vera Sans">I
                                        want to allow my unprivileged
                                        users, grouped by company name,
                                        to see all tickets in their
                                        queue. <br>
                                      </font></p>
                                    <p><font face="Bitstream Vera Sans">The
                                        group rights on the queue is
                                        correctly defined and users
                                        could access to the tickets by
                                        entring the ticket number in the
                                        "goto Ticket" field (top right
                                        in SelfService).<br>
                                      </font></p>
                                    <p><font face="Bitstream Vera Sans">I
                                        have tried to play with
                                        CustomRole but it's not working
                                        for me. So anybody known how I
                                        can do it?<br>
                                      </font></p>
                                  </span> Thank you,<span class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527HOEnZb"><font color="#888888"><br>
                                      <pre class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527m_-862211898222835891moz-signature" cols="72">-- 
Félix Defrance
PGP: 0x0F04DC57</pre>
                                    </font></span></div>
                              </blockquote>
                            </div>
                            <br>
                            <br clear="all">
                            <span class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font color="#888888"> <br>
                                -- <br>
                                <div class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527gmail_signature" data-smartmail="gmail_signature">
                                  <div dir="ltr">
                                    <div>
                                      <div>Alex Hall<br>
                                      </div>
                                      Automatic Distributors, IT
                                      department<br>
                                    </div>
                                    <a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br>
                                  </div>
                                </div>
                              </font></span></div>
                          <span class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font color="#888888"> </font></span></blockquote>
                        <span class="m_-3485086365929302112m_3321512374408554687HOEnZb"><font color="#888888"> <br>
                            <pre class="m_-3485086365929302112m_3321512374408554687m_-8327987905003692527moz-signature" cols="72">-- 
Félix Defrance
PGP: 0x0F04DC57</pre>
                          </font></span></div>
                    </blockquote>
                  </div>
                  <br>
                  <br clear="all">
                  <span class="m_-3485086365929302112HOEnZb"><font color="#888888"> <br>
                      -- <br>
                      <div class="m_-3485086365929302112m_3321512374408554687gmail_signature" data-smartmail="gmail_signature">
                        <div dir="ltr">
                          <div>
                            <div>Alex Hall<br>
                            </div>
                            Automatic Distributors, IT department<br>
                          </div>
                          <a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br>
                        </div>
                      </div>
                    </font></span></div>
                <span class="m_-3485086365929302112HOEnZb"><font color="#888888"> </font></span></blockquote>
              <span class="m_-3485086365929302112HOEnZb"><font color="#888888"> <br>
                  <pre class="m_-3485086365929302112m_3321512374408554687moz-signature" cols="72">-- 
Félix Defrance
PGP: 0x0F04DC57</pre>
                </font></span></div>
          </blockquote>
        </div>
        <br>
        <br clear="all"><span class="HOEnZb"><font color="#888888">
        <br>
        -- <br>
        <div class="m_-3485086365929302112gmail_signature" data-smartmail="gmail_signature">
          <div dir="ltr">
            <div>
              <div>Alex Hall<br>
              </div>
              Automatic Distributors, IT department<br>
            </div>
            <a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br>
          </div>
        </div>
      </font></span></div><span class="HOEnZb"><font color="#888888">
    </font></span></blockquote><span class="HOEnZb"><font color="#888888">
    <br>
    <pre class="m_-3485086365929302112moz-signature" cols="72">-- 
Félix Defrance
PGP: 0x0F04DC57</pre>
  </font></span></div>

</blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div>Alex Hall<br></div>Automatic Distributors, IT department<br></div><a href="mailto:ahall@autodist.com" target="_blank">ahall@autodist.com</a><br></div></div>
</div></div>