[rt-users] Mandatory Custom Field Privileges

[Thomas Sibley]

On 07/09/2013 05:08 PM, Tim Wiley wrote:
>> Not letting one group of users see a set of CFs is possible with RT's
>> rights, provided you haven't granted rights too widely at the global
>> level.  You may need to rejigger some of your rights first to be less
>> global and more role/group/object specific.
>>
> 
> I think that might've been the key.  I removed some more wide spread
> permissions on one of my mandatory fields & the error is gone.  Let me
> play around with the others & I'll get back to you.

Which error is gone?

How are you making the CFs mandatory, btw?  If it's an extension, that
may affect whether or not it's caring to check rights before verifying
mandatory-ness.

> The blanket permission was SeeCustomField granted to everyone on the CF
> level.  I'm guessing that there's no good way to allow a user to see the
> field, but not modify it?  Am I misunderstanding what SeeCustomField
> allows?
> 
> It's possible, I was mistaken on SeeQueue a while back.

The See* rights are just visibility, not modification.
ModifyCustomField controls adding/removing values from CFs on tickets, etc.