[rt-users] ExecuteCode by Queue AdminCc groups on RT::System

[Kai Storbeck]

Hello,

My production system contains a few ACL's that do not dump correctly
using rt-dump-metadata. They end up multiple times in our dump as:

      {
         "Right" : "ExecuteCode",
         "GroupDomain" : "RT::System-Role",
         "GroupType" : "AdminCc"
      },

(In JSON for readability)

These are in reality applied to the AdminCC group principal of queues.

What is the bug here?

Is it that I should be able to see such a right in the Global rights
page, or should the right not have been granted since the upgrade step
(3.9.1 iirc)?
(It is a bit of a weird delegation of rights, but a few of our AdminCc
groups have indeed the right to edit templates).

Thanks,
Kai


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 906 bytes
Desc: OpenPGP digital signature
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20131217/9d28bf58/attachment.sig>