[rt-users] RT permission question

Kenneth Crocker KFCrocker at lbl.gov
Thu Dec 18 15:45:18 EST 2008


Stephen,


	HA! I finally figured it out. I moved the code that forced the owner to 
"Nobody" from "PREP" to "Clean-up". That did it. Since only the Owner 
could modify the ticket, I was undoing that with the prep code. Talk 
about shooting yourself in the foot. Thanks for the help.


Kenn
LBNL

On 12/17/2008 3:12 PM, Kenneth Crocker wrote:
> Stephen,
> 
> 
> 	Here's another interesting test result; I had this same user create a 
> ticket in MY queue, which allows any privileged user the "SeeQueue" and 
> "CreateTicket" rights. Then I had this person create a ticket in his own 
> queue, make himself owner and then try to move it to my queue, No joy.?????
> 
> Kenn
> LBNL
> 
> On 12/17/2008 12:27 PM, Stephen Turner wrote:
>> On Wed, 17 Dec 2008 15:22:24 -0500, Kenneth Crocker <KFCrocker at lbl.gov> 
>> wrote:
>>
>>> Stephen,
>>>
>>>
>>>     I tried the following tests:
>>>
>>>     1) added rights to the first group for target queue. No Joy.
>>>     2) tried to have owner move ticket to a queue that allowed any
>>> privileged user to "CreateTicket". Also no joy.
>>>     I'm dumbfounded. He IS a privileged user or I wouldn't be able to 
>>> have
>>> him in a group. Of course, I checked anyway.
>>>
>>>
>>> Kenn
>>> LBNL
>>>
>> Kenn,
>>
>> Does your user have ModifyTicket on the "from" queue?
>>
>> One way to really get to the bottom of this is a Perl script that 
>> (logged on as your user) uses the API to read the ticket and attempts to 
>> change the queue. Stepping through the code using the debugger should 
>> show you exactly where the "permission denied" is happening and should 
>> help you figure out why.
>>
>> Steve
>>
> 
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> 
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
> 
> 
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
> Buy a copy at http://rtbook.bestpractical.com
> 




More information about the rt-users mailing list