[rt-users] Is this a bug or a feature? Rights to allow personal (My) saved search

Carlos Garcia Montoro cgarcia at ific.uv.es
Mon Feb 8 06:15:41 EST 2010


Hi,

We are using RT 3.8.7 and I want to allow my privileged users to save 
the searches that they want. In order to do that, I granted the 
following GLOBAL rights to my PRIVILEGED users:

-CreateSavedSearch
-EditSavedSearch
-LoadSavedSearches
-ShowSavedSearches

I thought that it would be enough but actually it isn't. Some users came 
to me claiming that they can save searches as members of their groups, 
but they couldn't save personal searches (as "My saved searches"). I 
have done some research and I have concluded that in order to save 
personal searches, I also have to grant the global "ModifySelf" right. 
This behaviour is strange to me. I don't want my users to grant 
"ModifySelf" because I don't want them to be able to change their email 
addresses, but I want them to be able to save their personal searches. 
Isn't it an odd behaviour?

----

As an extra in case you are interested, I explain why I don't want to 
grant "ModifySelf" right: I authenticate users through apache and pam 
and I get their personal information through a LDAP server, which has 
their usernames, emails, and so on. Every user's email (formed by his 
nickname) has an alias, which is what I get from LDAP. Our aliases 
follow some kind of standard for the whole institution, so it is easy to 
know which is the alias email of a user knowing his real name. Hence, I 
don't want to allow my users to modify their nicknames and password in 
RT because it wouldn't have any effect. I also don't want to allow them 
to modify their email addresses in RT, because they would mess 
everything and privileged users couldn't "a priori" know if a particular 
user is using his real email or his alias.

Hope to hear from people in Best Practical.

Best wishes,
Carlos García Montoro

-- 
  _______ _______________________________________________________________
| __ __ | Carlos García Montoro                    Ingeniero Informático
|_\_Y_/_| Instituto de Física Corpuscular         Centro Mixto CSIC - UV
|\_] [_/| Servicios Informáticos
|  [_]  | Edificio Institutos de Investigación        cgarcia at ific.uv.es
|C S I C| Apartado de Correos 22085 E-46071 Valencia  Tel: +34 963543706
|_______| España / Spain                              Fax: +34 963543488
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cgarcia.vcf
Type: text/x-vcard
Size: 441 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20100208/809ce5ff/attachment.vcf>


More information about the rt-users mailing list