[rt-users] ACL.RightName = 'SuperUser' OR ACL.RightName = 'ShowACL' :: please help

[Ken Crocker]

Raed,

The only thing I can think of to help de-bug this is to list the 
privileges you've set and then compare that list to what you see in the 
ACL table. Unless, of course, you have Rights Matrix installed. That 
would also help. I don't know if "Rights Matrix" works on 3.8.x, but it 
certainly is worth a try.


Kenn
LBNL

On 2/8/2010 8:50 AM, Raed El-Hames wrote:
> Maybe this time I'll get an answer ..
> RT-3.8.7 NO customisation apart from css
> DBIx - 1.56 apache2,mod_perl2
>
> I am seeing a lot of queries (1146 of them)
>  
> SELECT ACL.id FROM ACL, Groups, Principals, CachedGroupMembers WHERE 
> (ACL.RightName = 'SuperUser' OR ACL.RightName = 'ShowACL') AND 
> Principals.Disabled = 0 AND CachedGroupMembers.Disabled = 0 AND 
> Principals.id = Groups.id AND Principals.PrincipalType = 'Group' AND 
> Principals.id = CachedGroupMembers.GroupId AND 
> CachedGroupMembers.MemberId = 1 AND ACL.PrincipalType = Groups.Type  AND 
> ((ACL.ObjectType = 'RT::System' AND ACL.ObjectId = 1) OR (ACL.ObjectType 
> = 'RT::Queue' AND ACL.ObjectId = 4)) AND Groups.Domain = 
> 'RT::System-Role' AND Groups.Instance = '1' LIMIT 1
>
>
> The only changes I see between these queries are
> - variation between ShowACL and ModifyACL
> - ACL.ObjectId = x (where x is the id foreach active queue in the system 
> -- we have 116 active queues)
>
>
> 1- The first question that comes to mind what are we calling this lookup 
> anyway, if the RT System user does not have permission on a queue, then 
> the system is broken, so this lookup should be done differently and else 
> where??
> 2- Where is this called from so I can disable it (unless some one can 
> answer question 1 and enlighten me as to why its there)??
>
> Any help will truly be appreciated , these 1147 for 116 queues, my live 
> system have twice the amount of queues and my concerns that I will end 
> up with 3000 or so pointless queries with every page.
>
> Please please help.
>
> Roy
>
>
>
>
>
>
>
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
>
> 2010 RT Training Sessions!
> San Francisco, CA, USA - Feb 22 & 23
> Dublin, Ireland - Mar 15 & 16
> Boston, MA, USA - April 5 & 6
> Washington DC, USA - Oct 25 & 26
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
> Buy a copy at http://rtbook.bestpractical.com
>
>