[rt-users] unprivileged users in ticket owner list

[Rick Russell]

I suspect that, at some point in the past, these users were granted 
"OwnTicket" rights globally or for specific queues.

One of the bugs in RT 3.2.X (and perhaps carried over to RT 3.4.X) is 
that if you give rights or group membership to a user, then uncheck the 
"Let this user be granted rights" checkbox, RT does _not_ strip that 
user's rights or group membership.

It does demote them to the SelfService interface (so they can't log in 
to the real RT interface), but they can still post to all the queues on 
which they formerly had rights and open tickets by direct reference 
number and lots of things. And they still appear as valid owners if they 
have the "OwnTicket" right, even if you demote them to unprivileged.

So it's vital to remove rights & group memberships before unchecking the 
"Let this user be granted rights" checkbox.

Rick R.


Alan Sparks wrote:
> Just finished upgrade to RT 3.4.2, and all looks fine except...
> 
> When creatingor editing a ticket, and clicking open the "Owner" dropdown
> list, the list shows users that are not granted rights to RT.  Most are
> users that I had unchecked the "Let this user be granted rights"
> checkbox, and I've verified that this is still turned off in the
> imported user list.
> 
> How can this be fixed so ony active users with rights show up as
> possible ticket owners?
> Thanks in advance for any suggestions.
> -Alan
>