[rt-users] RT 3.6.0: custom field rights

[lzeyer]

Todd Chapman wrote:

>On Fri, Jun 16, 2006 at 04:52:43PM +0200, lzeyer wrote:
>  
>
>>Todd Chapman wrote:
>>
>>    
>>
>>>On Fri, Jun 16, 2006 at 11:50:03AM +0200, lzeyer wrote:
>>>
>>>
>>>      
>>>
>>>>Hi,
>>>>
>>>>I tested  custom field rights.  RT behaviour seems equal to RT3.4.4.
>>>>How do you do to allow :
>>>>
>>>> * a group to submit ticket with custom field values,
>>>> * only requestor and owner to modifiy their tickets custom field
>>>>   values,
>>>>
>>>>My configuration is:
>>>>
>>>> * group A :
>>>>       o modify custom field CF1 (create ticket isn't enough )
>>>>       o see custom field CF1
>>>>       o create ticket
>>>>
>>>>With this configuration, every  group A members are allowed to submit 
>>>>and modify custom fields of all tickets, not only which they are 
>>>>requestor or owner.
>>>>
>>>>  
>>>>
>>>>        
>>>>
>>>Try this. Give Privileged users See/Modify CF and CreateTicket.
>>>Give Requestor/Owner ModifyTicket.
>>>
>>>-Todd
>>>
>>>
>>>      
>>>
>>If i allow Privileged user to modify CF, they 'll can to modify it for 
>>all ticket ?
>>    
>>
>
>I think the WebUI makes sure you have ModifyTicket even when you
>just try to change CFs. Looking at the code now, I might be wrong.
>Please check this and let me know.
>  
>
I tested that. If a person has "modify CF" right on a CF, then he can 
modify this CF for all ticket, even if he hasn't "modifyticket" right.

-- 
Ludovic ZEYER
scm manager
tél: 01.69.53.44.71