[rt-users] Limiting the information unprivileged users are able to see via the webinterface
Joop
jvdwege at xs4all.nl
Wed Sep 28 11:08:17 EDT 2011
Lars Braeuer wrote:
> Hello,
>
> is there a way in RT 4.x to reduce the information an unprivileged user can see when he's accessing
> his tickets via the RT webinterface?
>
Yes, use Callbacks to skip the transactions you don't want.
The Callback you want to add is:
/opt/rt3/local/html/Callbacks/mococo/Ticket/Elements/ShowHistory/SkipTransaction
with SkipTransaction having something like:
<%init>
my $myskip=0;
if ( $Transaction->Type =~ /^(Set|Told)$/ ) {
if ( $Transaction->Field =~ /^(TimeWorked|Told|Starts|Started|Due)$/ ) {
$myskip = 1;
}
else {
$myskip = 0;
}
}
$$skip=$myskip;
</%init>
<%args>
$Transaction => undef
$skip
</%args>
Which skips the TimeWorked,Told,Starts,Started,Due transactions.
You might want to consider modifying other files in SelfService to not
show the user who worked on it but to show for example 'helpdesk'.
Greetings,
Joop
More information about the rt-users
mailing list