[rt-devel] quandry: secure parts of a ticket... should this be done with related tickets?

[Colleen]

> -----Original Message-----
> From: Phil Homewood [mailto:pdh at snapgear.com]
> Sent: Monday, December 16, 2002 6:23 PM
> To: rt-devel at lists.fsck.com
> Subject: Re: [rt-devel] quandry: secure parts of a ticket... should
this
> be done with related tickets?
> 
> Colleen wrote:
> > I put in rights for all 10 users for the 4 ordinary queues and for
the
> > secure queue, I only put permissions in for those 3 users.  I logged
out
> > and logged back in as an average user (no secure permissions) and I
> > tried to 'Create a Ticket' in the secure queue.  I was allowed to do
> > this.
> 
> What do the following commands show?
> 
> rtadmin --queue secure_queue --list-rights
> rtadmin --system --list-rights
> 
> (You probably want to run those as the unix user corresponding
> to your SuperUser, eg. root.)

Ok Thanks to Phil, Bruce and Darren, I got rtadmin working ok and I
tried the commands above and received:

[root at bizarro bin]# ./rtadmin --queue "CC Worksheets" --list-rights
[root at bizarro bin]# ./rtadmin --system --list-rights
In AdminSystem

I also re-tried the test of having an unprivaledged user create a ticket
in a queue they do not have rights for.  The user is still allowed to do
this, unfortunately.

Thanks!
--c