[rt-users] Questions about Assigning Global Group Rights

[David Fandel]

I am currently playing around with RT (Currently using RT 3.0.3)

I generated the following list of various rights to assign. 

There are some questions embedded in the list (and at the end of
the list), but I'm also kind of interested in whether I am 
assigning excessive or incomplete rights.

-------------------------------------------------------------

Global -> Group Rights:

    System Groups:  Everyone

       CreateTicket
       CommentOnTicket
       ReplyToTicket

    System Groups:  Privileged

       ModifySelf
       ShowTicket
       <I assume they inherit the Everyone rights>


    Roles:    Requestor

       ShowTicket

    Roles:    CC

       ?? What rights should they get ??

    Roles:    AdminCC

       ?? What rights should they get ??


    User Defined Groups:  <*A - An RT admin group>

       AdminCustomFields
       AdminGroup
       AdminGroupMembership
       AdminQueue
       AdminUsers
       ModifyScrips
       ModifyTemplate
       ShowACL
       ShowScrips
       ShowTemplate

    User Defined Groups:  <*B - A group with assign ability>

       ModifyTicket
       ModifyQueueWatchers
       SeeQueue

    User Defined Groups:  <*C - A group with answer/comment ability>

       CommentOnTicket
       CreateTicket
       ModifySelf
       OwnTicket
       ReplyToTicket
       SeeQueue
       ShowTicket
       ShowTicketComments
       StealTicket
       TakeTicket
       Watch


*A: An RT admin group - this would have users that would be responsible
    for creating new queues, scrips, templates and users.

*B: A group with assign ability - this would be a group that would monitor
    a queue and assign tickets to other users for resolution.  

*C: A group with answer/comment ability - this would be the group actually
    resolving the tickets.  Presumably they could assign themselves a ticket
    (TakeTicket right) 

-------------------------------------------------------------
Questions:

A. Are any of these groups missing rights?

B. Should the User Defined Group B have most of the User Defined Group C
   rights as well?  Or does ModifyTicket essentially give them most of
   the other Ticket rights?

C. When would you want to assign the "WatchAsAdminCC" right?  (The comment
   in the docs "Like Watch, but only as an Admin" is not very clear :)

D. When would you want to assign the following rights?

      AdminGroupMembership
      DelegateRights

Thanks,
Dave Fandel
Sr Developer (BIG development)