[rt-users] 10 newest unowned tickets

Kenneth Crocker kfcrocker at lbl.gov
Wed Jul 21 14:39:52 EDT 2010


Jeff,

Sounds good to me.

Kenn

On Wed, Jul 21, 2010 at 11:04 AM, James Berwick <jim at jamesberwick.com>wrote:

> On 7/21/2010 1:46 PM, Kenneth Crocker wrote:
>
>> Jeff,
>>
>> Not if I'm not supposed to. So what if there aren't 10 unowned tickets in
>> the list? As a matter of security, I sure wouldn't want someone looking at
>> sensitive payroll info on requests in the Payroll Queue if they aren't even
>> allowed to have access to the payroll Queue.
>>
>> Kenn
>> LBNL
>>
> If I understand correctly:
> There are 100 open tickets.  The 10 newest unowned tickets belong to a
> queue that a user can't see.  The user logs in and the 10 newest unowned
> tickets box is empty.  There are 90 other tickets that are new and unowned
> that the user should be allowed to see but are not displayed.
>
> What I believe Mark and Jeff are saying (and that UseSQLForACLChecks does)
> is have the box be filled with the 10 newest unowned tickets that a user is
> allowed to see, ie, filter the tickets during the search as opposed to
> finding the top 10 and then filtering out what shouldn't be visible.
>
>
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
> Buy a copy at http://rtbook.bestpractical.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20100721/48fb6c93/attachment.htm>


More information about the rt-users mailing list