[rt-users] ModifyTicket/Steal/Take privileges

[Kenneth Crocker]

Jon,

Well, here's a thought.

1) For each Queue you want this type of situation, either make the
"assigner" the AdminCc, or create a group for just those users allowed to
assign tickets.
2) Then create scrip for that Queue that is conditioned by "ChangeOwner" and
in the action section, check to see that the actor of this transaction is in
that "Assigner" group or that they are the AdminCc. If they are, allow the
change. If not, change the owner back.

That might work.

Kenn
LBNL

On Thu, Feb 17, 2011 at 8:26 AM, Kevin Falcone <falcone at bestpractical.com>wrote:

> On Thu, Feb 17, 2011 at 08:06:03AM -0600, Jon Baker wrote:
> > Thanks for the reply, Kenn - I want the users to be able to be
> > assigned the ticket by the admin, but I don't want them to be able
> > to change any ticket assignments themselves.  So Joe is in the Users
> > group, and Sam is in the Admin group.  Sam needs to be able to
> > assign ownership of a ticket to Joe.  Joe needs to be able to
> > resolve tickets.  But Joe should not be able to assign the ticket to
> > anyone else, nor should he be able to steal or take a ticket.
> >
> > I'm going to see if I can figure out a way to do this with a Scrip unless
> there's some permission voodoo that i'm missing.
>
> ModifyTicket implies being able to change the owner, so you'll need to
> enforce your no-changes rule elsewhere
>
> -kevin
>
> > On Feb 16, 2011, at 8:10 PM, rt-users-request at lists.bestpractical.comwrote:
> >
> > > Jon,
> > >
> > > Remove the right to "OwnTicket" as well as "Steal" and "Take". You can
> grant
> > > the "ModifyTicket" to that group as well as "ShowTicket" and that way
> they
> > > can See tickets in a Queue, Modify them, but not Own them.
> > >
> > > Kenn
> > > LBNL
> >
> > --
> > Jon Baker
> > Systems Administrator
> > Church on the Move
> > 1003 N 129th E Ave
> > Tulsa OK 74116
> > (918) 234-5656
> >
> >
> >
> >
> > CONFIDENTIALITY NOTICE: This transmission may be confidential and subject
> to legal privilege.  If you are not the intended recipient of this message,
> you may not review, disclose, print, copy or disseminate this information.
> If you have received this in error, please reply and notify the sender
> (only) and delete the message. Unauthorized interception of this e-mail is a
> violation of federal criminal law.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20110217/f352ce04/attachment.htm>