[rt-users] Prevent Requestors from setting the 'approval' ticket to status 'Resolve'

[Kevin Falcone]

On Wed, Oct 20, 2010 at 10:33:11AM -0400, Ahmed, Mohammed Naweed (LNG-BCT) wrote:
> 
> 
>    I have setup the approval work flow and it is working great expect for one problem, when I am
>    creating and ticket, I can see the approval ticket in the links and I can open it too. The
>    problem now is I can set to `Resolve' by clicking on the status links. Even though I am
>    neither the owner of the `Approval' ticket or has any rights on the ___Approval Queue.
> 
>    Can some body please explain me how to prevent the requestors from setting the Approval
>    tickets status to `Resolve'?

You must have ModifyTicket granted too broadly.  You probably even
want to restrict ShowTicket in __Approval to folks who should be in
there (or to the AdminCc/Owner roles).

-kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20101026/b4c3e608/attachment.sig>