[rt-users] Modify without ModifyTicket?

[Christopher Short]

Thanks Kenneth, I hadn't heard of RTx::RightsMatrix before, I'll give it a go.

However, I don't have any (additional) rights for owners on that group or globally. In our system all Privileged users have ReplyTicket, everything else is on a Group basis.

Hmmm maybe I added custom fields with global privileged modify access. Aha!
(But the original problem was the "worked" field which seems like a loophole in RT, people with Comment rights can edit several fields on the Comment screen, including Worked)
cheers,
Christopher

-----Original Message-----
From: Kenneth Crocker [mailto:KFCrocker at lbl.gov]
Sent: Friday, December 07, 2007 4:52 AM
To: Christopher Short
Cc: rt-users at lists.bestpractical.com
Subject: Re: [rt-users] Modify without ModifyTicket?

Christopher,

        What rights have you given the role "owner" both globally and for that
queue? CommentOnTicket allows modification ONLY to the comments part of
a ticket, not the status or dates, etc. Do you have RightsMatrix? That
will help a great deal in finding out "who" can do "what" and "where"
and thru what rights. You could have inadvertently granted some rights
thru "fall-thru" inclusion to rights for roles. Hope this helps.


Kenn
LBNL

On 12/5/2007 11:06 PM, Christopher Short wrote:
> Hi,
>
> I have users who can modify tickets in a queue that I didn't expect.
>
>
>
> All those users are are assigned to just one group with these
> permissions on the queue:
>
>
>
> CommentOnTicket
> OwnTicket
> SeeQueue
> ShowTicket
> ShowTicketComments
>
>
>
> The only other thing that applies to them is the Everybody group with
> ReplyTicket. Privileged has no added rights.
>
>
>
> Is ModifyTicket implied by OwnTicket? I've seen comments that imply that
> it isn't.
>
>
>
> Christopher
>
> (RT 3.6.1)
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
> SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:
>
> If you sign up for a new RT support contract before December 31, we'll take
> up to 20 percent off the price. This sale won't last long, so get in touch today.
>     Email us at sales at bestpractical.com or call us at +1 617 812 0745.
>
>
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
>
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
> Buy a copy at http://rtbook.bestpractical.com