[rt-users] Privilege only on a ticket but not to the whole queue

[Kenneth Crocker]

Asif,


	I don't think so. Unless I am wrong, it is my understanding that rights 
are granted on a "queue" basis and therefore all tickets in that queue. 
I've never heard of granting rights on a ticket basis. To do that, I 
believe it would involve creating another level (by ticket) of 
privileges and that would certainly mean modifying the DataBase and the 
code that checks privileges. Sounds like an incredibly messing 
modification. Why not just give group1 "SeeQueue", "ShowTicket", 
"ShowOutgoingEmail", "ShowTicketComments", and maybe "CommentOnTicket" 
rights to Queue2? We like to limit granting the "ModifyTicket" right to 
just the ticket owner and the Queue Admin (AdminCc Watcher). It keeps 
things from getting messy with a bunch of people updating tickets they 
don't own. Anyway, that's all I can think of. Hope it helps.


Kenn
LBNL

On 5/27/2008 11:00 AM, Asif Iqbal wrote:
> I have a group `group1' who sometimes drop a ticket from their queue 
> `Queue1' to our queue `Queue2' as part of the requirement.
> Now is it possible to give that group `group1' read/write access *only* 
> to the ticket(s) they drop on queue `Queue2' and no read or
> read/write access to other tickets in that queue, `Queue2' ?
> 
> Thanks
> 
> -- 
> Asif Iqbal
> PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu <http://pgp.mit.edu>
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> 
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
> 
> 
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
> Buy a copy at http://rtbook.bestpractical.com