[rt-users] Right could not be revoked

[Ruslan Zakirov]

It's been reported once, but there is no solution as other developers
and I can not reproduce the problem. The only option I see is to
delete record(s) from ACL table. The only inconsistent data you can
leave there are invalid delegations, but it's possible to clean them
too. Delegations in the same table.

Anyway, it would be cool if you will dig a little bit to give us way
to reproduce the problem.

On Sat, Nov 22, 2008 at 3:54 AM, Malcolm Frazier
<mfrazier at thoughtconvergence.com> wrote:
> Hello,
>
>
>
> When I discovered this "bug" my original intention was to create a new queue
> and a new user who would have complete control over the newly created queue,
> but absolutely no privileges for any of the other queues that already exist.
> Unfortunately I can not do this because when I create a new user and make
> them a privileged user right off the bat they become a super user with the
> ability to delegate rights and do whatever else they wish. To defeat this I
> tried going to the global group rights and revoking the "DelegateRights" and
> "SuperUser" rights from the groups "Everyone" and "unprivileged", but when I
> attempt to modify these I get the error "Right could not be revoked" I am
> positive the user I am logging in as does have sufficient rights; I believe
> I have seen this issue on the mailing list archive or some other site, but
> without resolve. If anyone haves any input that may be of some use I would
> greatly appreciate the feedback.
>
>
>
> Thank you
>
>
>
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
>
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
> Buy a copy at http://rtbook.bestpractical.com
>



-- 
Best regards, Ruslan.