[rt-users] ACE to Suppress History display

[Ruslan Zakirov]

Why don't you use Comment/Correspond differences? Requestor can see
corresponds and cannot comments, so you can put things user shouldn't
see into comments. ShowTicketComments right control this.

On 4/19/07, Gene LeDuc <gleduc at mail.sdsu.edu> wrote:
> Hi All,
>
> Is there and ACL Right (or combination of rights) that I can use to take
> away the ability of a user to display ticket history?  When we send our
> user a link so that he can check the status of his ticket, we do not want
> him looking at the ticket history.  If we do allow him to see the history
> we are going to get endless "What does it mean when it says...?"
> questions.  All the user needs to know is that the ticket exists, its
> status, some dates - the basic stuff.  The RT Book wasn't much help for me
> and I haven't been able to make this happen through trial and error.
>
> A little bit more on this:
> When the ticket is created, a login password is generated for the user and
> he gets an acknowledgement e-mail with a link to the ticket and his login
> credentials.  So he already has the rights to login to RT and see his
> ticket (the ShowTicket right is granted to Requestor in the queue).  It
> just shows him more than we want him to see.
>
> Thanks,
> Gene
>
>
>
> --
> Gene LeDuc, GSEC
> Security Analyst
> San Diego State University
>
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
>
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
> Buy a copy at http://rtbook.bestpractical.com
>


-- 
Best regards, Ruslan.