AW: Re: Re: [rt-users] Custom Fields and Rights Question / maybe a bug

Wed Aug 8 12:19:20 EDT 2007

Hmmmm, an new right would not fix the core of the problem....i think this not only occurs on create, this can also hapen at resolve time.

From the workflow point of view we have the situation that a user creates a ticket with only limited rights, later groups working at the same ticket have more rights and have to set this cf, later groups only need to see what happens with this ticket and resolve this...

I think to bypass the mandatory check and only display the cf if needed but with no chance to ut something should be a cleaner solution?!?

Torsten

-----Original Message-----
From: ruslan.zakirov at gmail.com <ruslan.zakirov at gmail.com>
To: Ham MI-ID, Torsten Brumm
CC: rt-users at lists.bestpractical.com <rt-users at lists.bestpractical.com>
Sent: Wed Aug 08 18:02:08 2007
Subject: Re: Re: [rt-users] Custom Fields and Rights Question / maybe a bug

If a CF is mandatory then all users who can create tickets in queues
CF applies to must have 'ModifyCustomField' right. I think this way.
Do you have another ideas? At least as I understand this the way it
work now.

I was thinking about while fixing bug in 3.7 and came to two ideas:
1) Mandatory CFs must have default value. So when people couldn't set
a CF then we apply default and the fact that the CF is mandatory
doesn't prevent creation.
2) We can add new 'SetCustomFieldOnCreate' right which can be useful
in many workflows and also admins would be able to allow users to
create tickets with mandatory fields, but deny changing a field after
that.

Both ideas are subject of RT 3.8 only, as I said we can only back port
a patch from 3.8 to avoid confusion of users and admins.

On 8/8/07, Ham MI-ID, Torsten Brumm <torsten.brumm at kuehne-nagel.com> wrote:
>
>
>
> Hi ruslan,
>
>  Yes for a normal cf this is not critical, but together with a cf set to
> mandatory this becomes critical, because the user is not able to create a
> ticket via gui anymore for this queue :-(
>
>  Torsten
>
>
>  -----Original Message-----
>  From: ruslan.zakirov at gmail.com <ruslan.zakirov at gmail.com>
>  To: Ham MI-ID, Torsten Brumm
>  CC: rt-users at lists.bestpractical.com
> <rt-users at lists.bestpractical.com>
>  Sent: Wed Aug 08 16:13:33 2007
>  Subject: Re: [rt-users] Custom Fields and Rights Question / maybe a bug
>
>  On 8/8/07, Ham MI-ID, Torsten Brumm <torsten.brumm at kuehne-nagel.com> wrote:
>  > Hi RT Users, Developers,
>  >
>  > i'm not 100% sure if this is a bug or if i'm again too dumb...
>  >
>  > For a Custom Field, I can grant the following Group Rights:
>  >
>  > SeeCustomField
>  > ModifyCustomField
>  > AdminCustomField
>  >
>  > >From my point of understanding, SeeCustomFields allows a user to see the
> CF and it's content, but not to change it?
>  right
>
>  >
>  > ModifyCustomFields grant him the right to change the Content of the CF
> and AdminCF grants him the right to change this CF, is this correct so far?
>  AdminCF allow user to admin a CF, add new possible values, change type...
>  ModifyCF allow user to modify value(s) of a CF on tickets or objects
>  this particular CF applies to.
>
>  >
>  > If the point above is correct, then if a user that only have the rights
> SeeCustomField should only be able to see this field and content, but should
> not be able to change the content?
>  right.
>
>  >
>  > OK, now my problem and why I'm thinking that's a bug...
>  >
>  > If a user creates a ticket in a queue with a custom field assigned and he
> has only the right SeeCustomField at this CF, he should see the field but
> should not be able to enter something there?!? But he is...!...is this the
> correct way of handling the ACL or do I something wrong?
>  Yeah, there is a small bug on create. User see fields he can see even
>  if he can't modify them, but as far as I know user gets 'permission
>  denied' after creation for fields he can't modify.
>
>  In 3.7 development branch we don't show fields user can't modify on
>  the create ticket page anymore. I think we can backport that fix.
>
>  >
>  > Its under RT 3.6.4 and I have double checked the rights, the global
> rights, group rights and user rights...
>  >
>  > Any Ideas or hints or understand I the rights Setup for CF totally
> wrong???
>  > --
>  >  Thanks in advance
>  >  ....
>  >     : Torsten Brumm
>  >     :
>  >     : Kuehne + Nagel
>  >     : HAM - MI-ID
>  >     :
>  >     : Bauerbergweg 23-25
>  >     : 22111 Hamburg
>  >     :
>  >     : +49 (40) 30333 3199
>  >     : +49 (40) 30333 44 3199
>  >     :
>  >     : torsten.brumm at kuehne-nagel.com
>  >     : www.kn-portal.com
>  >     : icq: 78258840
>  >     ....
>  >
>  >
>  > Kühne + Nagel (AG & Co.) KG, Geschäftsleitung: Hans-Georg Brinkmann
> (Vors.), Uwe Bielang (Stellv.), Dr. Björn Johansson (Stellv.), Bruno Mang,
> Alfred Manke, Thorsten Meincke, Mark Reinhardt (Stellv.), Tim Scharwath,
> Jens Wollesen Sitz: Bremen, Registergericht: Bremen, HRA 21928, USt-IdNr.:
> DE 812773878, Persönlich haftende Gesellschaft: Kühne & Nagel A.G., Sitz:
> Contern/LuxemburgGeschäftsführender Verwaltungsrat:
> Klaus-Michael Kühne
>  > _______________________________________________
>  >
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>  >
>  > Community help: http://wiki.bestpractical.com
>  > Commercial support: sales at bestpractical.com
>  >
>  >
>  > Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
>  > Buy a copy at http://rtbook.bestpractical.com
>  >
>
>
>  --
>  Best regards, Ruslan.
>
>
>

-- 
Best regards, Ruslan.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20070808/286ba7c6/attachment.htm>