[rt-users] Query Builder Problems

[Chris Poupart]

OK,

I just realized that they had "CreateTicket" and "Watch" because of 
Global group settings.

So I removed all of those permissions as well.  Now when I look at the 
Rights Matrix for an unprivileged user, they have absolutely no rights.

However, the problem still persists. :(

I appreciate your help.  Looking through my permissions, it seems that 
it was time for a cleanup anyway!

-- Chris

Drew Barnes wrote:
> My last suggestion would be to try removing "watch" rights to
> unprivileged. 
>
> My rights setup (in case this may help you):
> Privileged: Steal Ticket, TakeTicket
> Unpriv'ed: CreateTicket, SeeQueue
> Everyone: CreateTicket (probably redundant), ReplyToTicket
> Requestor: ReplyToTicket
>
> MyGroup: ModifyTicket, OwnTicket, ShowTicket, ShowTicketComments, Watch,
> WatchAsAdminCC
>
> MyGroup is the only group that appears in the Owner box on my 3.6.4
> (upgraded from 3.2.2) system.
>
> Hope this helps you some.
>
>
> Chris Poupart wrote:
>   
>> Unfortunately, this hasn't brought me any closer to resolving the bug.
>>
>> If I take a random auto-generated user,  they do not have "OwnTicket"
>> rights on any of the queues. :(
>>
>> So I then went through and removed all of the permissions to the
>> system defined groups (Everyone, Privileged, Unprivileged, Owner,
>> AdminCC, CC, etc) for all of the queues.
>>
>> Now if I look at an unprivileged auto-created user in the Rights
>> Matrix, they have "Create Ticket" rights to all of the queues, and
>> "Watch" rights to all of the queues.  That's it.
>>
>> However, I still have the problem that /all/ of the users load when I
>> bring up the Build.html page. :-/
>>
>> If anyone has any other advice on this one, I would love to hear it.
>>
>> -- Chris
>>
>> Chris Poupart wrote:
>>     
>>> Thanks Drew,
>>>
>>> I have RTx:RightsMatrix installed, and I am looking through.  So far
>>> there is nothing obvious, unless I am missing something.
>>>
>>> I don't have an over-abundance of queues, so I may just go through
>>> them and double-check the permissions for groups that would apply to
>>> everyone (really only the default global groups).
>>>
>>> -- chris
>>>       
>
>