[rt-users] User right to save searches

[Ken Crocker]

Scott,

Yea. I can see that. We kind of went around that by the way we use LDAP 
for our sign-ons. It doesn't matter what they do to their password in 
"Preferences", it always gets overridden by LDAP. In other words, they 
can't screw it up.

Kenn
LBNL

On 10/1/2009 10:02 AM, Lander, Scott wrote:
> Ken,   Thanks for your reply.
>  
> My setup is similar - actually - identical.    Although I have given, 
> globally to privileged users, the rights CreateSavedSearch, 
> EditSavedSearch and ShowSavedSearch along with all other rights, they 
> still can't actually save a search unless I also give them ModifySelf 
> (which presents the preferences tab that I don't want them to have....)
>
> ------------------------------------------------------------------------
> *From:* Ken Crocker [mailto:kfcrocker at lbl.gov]
> *Sent:* Thursday, October 01, 2009 12:39 PM
> *To:* Lander, Scott
> *Cc:* rt-users at lists.bestpractical.com
> *Subject:* Re: [rt-users] User right to save searches
>
> Scott,
>
> We grant all the Create, save, edit, etc. search rights to all 
> privileged users at the global level. Since we only grant the 
> "SeeQueue", "CreatTicket", & "ShowTicket" rights to a queue at the 
> Queue level only, by granting the search rights globally, the actual 
> queues they can sees defers to the rights granted at the Queue level. 
> Much less maintenance AND everyone has all the "search" rights to 
> whatever Queue they can see. Hope this helps.
>
> Kenn
> LBNL
>
> On 10/1/2009 8:37 AM, Lander, Scott wrote:
>> It appears that for a user to be able to save their searches, I have 
>> to give them rights to the preferences tab.   I really don't want 
>> them to be able to, for instance, change their passwords, which is 
>> under the preferences tab (they authenticate via ldap, and this would 
>> change the local password - it would get confusing....)
>>  
>> Am I missing something obvious?
>>  
>> Thanks
>> Scott
>>  
>>  
>> ------------------------------------------------------------------------------------
>> This e-mail message is intended only for the personal use of the recipient(s) named above. If you are not an intended recipient, you may not review, copy or distribute this message. If you have received this communication in error, please notify the Hearst Service Center (cadmin at hearstsc.com) immediately by email and delete the original message.
>> ------------------------------------------------------------------------------------
>>   
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>>
>> Community help: http://wiki.bestpractical.com
>> Commercial support: sales at bestpractical.com
>>
>>
>> Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
>> Buy a copy at http://rtbook.bestpractical.com
> ------------------------------------------------------------------------------------
> This e-mail message is intended only for the personal use of the recipient(s) named above. If you are not an intended recipient, you may not review, copy or distribute this message. If you have received this communication in error, please notify the Hearst Service Center (cadmin at hearstsc.com) immediately by email and delete the original message.
> ------------------------------------------------------------------------------------
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20091001/9554977a/attachment.htm>