[rt-users] Non privileged users and SeeQueue ACL question
Travis Campbell
travis.campbell at amd.com
Wed Oct 31 13:59:20 EST 2001
We're testing rt2.0.8 and noticed a peculiar issue with the SeeQueue right.
We have the following test queues:
general
Crisis
PrivateQueue
The ACL's are configured as follows:
Global:
Everyone can
CreateTicket
ReplyToTicket
ShowTicket
ShowTicketComments
Requestor can
CommentOnTickets
CreateTicket
ReplyToTicket
ShowTicket
ShowTicketComments
Watch
ModifyTicket
SeeQueue
Queue:
general queue
Everyone can
SeeQueue
Crisis queue
Everyone can
SeeQueue
PrivateQueue queue
No specific queue level rights are granted (Global rights
intervene here).
We only want non-privileged users to be able to see the general and Crisis
queue when submitting via the web. The PrivateQueue is where tickets get moved
to so the staff can work on them.
The issue that we're seeing is that when a non-privileged user views his open
ticket via the SelfService interface, the only queue names that ever show up
are general and Crisis. This causes the SelfService interface to give output
like:
* Wed Oct 31 11:50:07 2001 travis - Queue changed from general to Crisis
* Wed Oct 31 11:50:07 2001 travis - Queue changed from Crisis to
* Wed Oct 31 11:50:07 2001 travis - Queue changed from to
Why doesn't the SeeQueue right in Global->Requestor take over here and let us
see the queue name? The only way we can see the queue name is if we grant
Global->Everyone the right to SeeQueue, but this isn't what we want.
If I'm being hazy on bits here, please let me know and I'll try to provide
a fuller description of our setup.
Thanks!
Travis
--
Travis Campbell - Unix Systems Administrator = travis at beast.amd.com
5900 E. Ben White Blvd, Austin, TX 78741 = travis.campbell at amd.com
TEL: (512) 602-1888 PAG: (512) 604-0341 = webmaster at beast.amd.com
============================================================================
"Does anything work as expected?" Yes. An axe through the CPU.
More information about the rt-users
mailing list