[Rt-devel] Should creating a group give the creator AdminGroupMembership?

Todd Chapman todd at chaka.net
Fri Jan 20 17:31:28 EST 2006


I argree about the groups. When I implement this locally
the user will actually have AdminGroup based on
membership in a group with that right. What I plan
to do is figure out how the user got the right and then
give that group the AdminGroupMembers right.

-Todd

On Fri, Jan 20, 2006 at 05:02:42PM -0500, Stephen Turner wrote:
> At Friday 1/20/2006 04:43 PM, Todd Chapman wrote:
> >I want to give an RT user the ability to create new
> >RT groups. So I can give that user AdminGroup
> >globally. But once the group is created the user
> >can't add members to the group. I don't want to
> >give the user AdminGroupMemberships globally because
> >they could add themselves to another, more powerful
> >group.
> >
> >Should I submit a patch for RT so that when a user
> >creates a UserDefined group they are granted
> >SeeGroup and AdminGroupMemberships on the new
> >group?
> >
> >-Todd
> 
> One thing we like about RT is that we can grant all our privileges to 
> groups - we don't grant privileges to individual users. This mod would 
> break this approach - so I'd argue against including it in core RT.
> 
> Steve


More information about the Rt-devel mailing list