[rt-users] Restrict GUEST user

[Steve_McStravick at BreconRidge.com]

I am setting up RT 3.4.1 on Oracle 9i, using Fedora to use internally,
(migrating from WREQ 2.7).
I decided to only use the web interface for creating tickets, so I can have
requestor populate custom fields for each queue..
To accomplish this, without the hassle of pre-loading everyone into the
system, I have created an 'unprivileged' guest user that can see queues and
can create tickets.  I have also added the autocreate user for all new
requestors with the auto-generated password being emailed.

There are 2 problems I have.
1) Since I want these new users to be able to change their passwords once
their accounts have been created, I need to give the 'unprivileged' user
ModifySelf, but this also leaves the door open for anyone to change the
guest account's password.  So I'd like to be able to add the restriction so
the 'guest' user doesn't have this permission.
2) Since it is the guest user who is the 'Creator' of the ticket for new
users, but guest isn't the 'Requestor', it gives an error, saying 'RT user
doesn't have permission to view the created ticket #1234'.  I don't want to
open the door to give everyone access to SeeTicket, because that will allow
them to see all tickets. But I'd like to either change this message or have
the page open at the 'CreateTicketInQueue' page instead of trying to
display the ticket.

Steve McStravick

I.S.
BreconRidge Manufacturing Solutions
500 Palladium Drive
Ottawa, ON K2V1C2

Steve McStravick

I.S.
BreconRidge Manufacturing Solutions
500 Palladium Drive
Ottawa, ON K2V1C2
613-886-6842