[rt-users] Rights, rights, rights...

[Jean-Sebastien Morisset]

Hi everyone,

Phew! There are a lot of different ways to setup rights. Our RT 3.6.6
users are checked against our Active Directory server and created
automatically. For some reason when someone sends e-mail, and an account
doesn't already exist for them, the e-mail fails (I guess this is
because there wasn't a password to authenticate the user). So I had to
give 'Everyone' some permissions.

Here's what I did... Does anyone see a problem with this?

Configuration -> Global -> Group Rights:

Everyone   
  AssignCustomFields
  CreateTicket
  SeeCustomField

Privileged	
  AssignCustomFields
  CreateSavedSearch
  CreateTicket
  EditSavedSearches
  LoadSavedSearch
  ModifySelf
  SeeCustomField
  SeeGroup
  SeeQueue
  ShowSavedSearches
  ShowTicket
  Watch

Requestor	
  AssignCustomFields
  CreateSavedSearch
  CreateTicket
  EditSavedSearches
  LoadSavedSearch
  ModifySelf
  ReplyToTicket
  SeeCustomField
  SeeGroup
  SeeQueue
  ShowSavedSearches
  ShowTicket

User defined groups: Management	
  AssignCustomFields
  CommentOnTicket
  CreateSavedSearch
  CreateTicket
  EditSavedSearches
  LoadSavedSearch
  ModifyQueueWatchers
  ModifySelf
  ModifyTicket
  OwnTicket
  ReplyToTicket
  SeeCustomField
  SeeGroup
  SeeQueue
  ShowACL
  ShowOutgoingEmail
  ShowSavedSearches
  ShowScrips
  ShowTemplate
  ShowTicket
  ShowTicketComments
  StealTicket
  TakeTicket
  Watch
  WatchAsAdminCc

User defined groups: RT-Admin   
  AdminAllPersonalGroups
  AdminCustomField
  AdminGroup
  AdminGroupMembership
  AdminOwnPersonalGroups
  AdminQueue
  AdminUsers
  AssignCustomFields
  CommentOnTicket
  CreateSavedSearch
  CreateTicket
  DelegateRights
  DeleteTicket
  EditSavedSearches
  LoadSavedSearch
  ModifyACL
  ModifyCustomField
  ModifyOwnMembership
  ModifyQueueWatchers
  ModifyScrips
  ModifySelf
  ModifyTemplate
  ModifyTicket
  OwnTicket
  ReplyToTicket
  SeeCustomField
  SeeGroup
  SeeQueue
  ShowACL
  ShowConfigTab
  ShowOutgoingEmail
  ShowSavedSearches
  ShowScrips
  ShowTemplate
  ShowTicket
  ShowTicketComments
  StealTicket
  TakeTicket
  Watch
  WatchAsAdminCc
 
Queue specific rights are given for groups by queue...

Configuration -> Queues -> Unix -> Group Rights:

User defined groups: Unix
  AssignCustomFields
  CommentOnTicket
  CreateTicket
  ModifyTicket
  OwnTicket
  ReplyToTicket
  SeeQueue
  ShowACL
  ShowOutgoingEmail
  ShowScrips
  ShowTemplate
  ShowTicket
  ShowTicketComments
  StealTicket
  TakeTicket
  Watch
  WatchAsAdminCc

Thanks!
js.
-- 
Jean-Sebastien Morisset, Sr. UNIX Administrator <jsmoriss at mvlan.net>