[rt-users] Per-transaction reply/comment with quoting

[Ruslan U. Zakirov]

Bret Martin wrote:
> On Mon, 19 Jul 2004 12:16:29 EDT "Michael S. Liebman" wrote:
> 
>>I'd say its more an attempt to correct some of the confusion related
>>to ModifyTicket. ModifyTicket has been a bit too broad in its
>>application. Allowing commenting and changing of custom fields
>>shouldn't necessarily be related.
> 
> 
> On Mon, 19 Jul 2004 12:18:59 EDT "Michael S. Liebman" wrote:
> 
>>As implied by my other reply, I'd rather see the reply/comment
>>abilities get separated from the ModifyTicket right. I'd consider that
>>more of a bug and might make things easier for people who want to
>>allow editing of custom fields by self service.
I find ModifyTicket most insecure right that RT has. ModifyTicket allow 
unique tasks, but also allow some tasks that can be granted by other rights.

> 
> 
> I don't necessarily disagree with you, although when I saw ModifyTicket
> for the first time, I thought "nice, a 'do what I mean' setting".  But I
> see your point in terms of having the rights be finer-grained.
> 
> I'd be happy with unambiguous documentation and consistent behavior
> either way.
http://wiki.bestpractical.com/?Rights
When we wrote this I scan code for Rights checks to be sure that 
description is correct.

> 
> --Bret