[rt-users] prevent external users to be owners

[Kevin Falcone]

On Thu, Aug 25, 2011 at 07:16:57AM -0400, Gilbert Rebeiro wrote:
> I'm confused by the permissions.
> I understand that when a user doesn't have the privileged user flag
> the are unprivileged
> That being said, when I go into the Modify global group rights.
> I choose Unprivileged I don't understand why there are 3 tabs
> (General Rights, Staff, and Rights for Administrators) what do these
> tabs have to do with an unprivileged user?

Those are "rights you often give to staff" and "rights you often give
to administrators".  They are not groups.  They do not turn users into
staff.  They are simple a way of organizing the rights.

> The own ticket right is on the Staff tab, yet a Unprivileged user is
> not a staff.
> 
> Am I the only one confused??
> 
> Sorry I just don't get it.
> I'm not sure how I gave Everyone the right to own a ticket, on the
> Everyone group there are also 3 tabs???

See my explanation above.  Giving Everyone OwnTicket is almost never
the right configuration.

-kevin

> 
> On 24/08/2011 9:33 AM, Kevin Falcone wrote:
> >On Wed, Aug 24, 2011 at 08:44:10AM -0400, Gilbert Rebeiro wrote:
> >>Is there anyway to prevent external users from being owners of tickets?
> >Don't grant them the OwnTicket right.
> >You probably gave it to Everyone instead of a selected group of users.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20110825/22b5c172/attachment.sig>