[rt-users] Prevent users from making Comments on tickets

[Alex Peters]

I believe that a user will unconditionally have commenting ability if they
also have the ModifyTicket right, regardless of the state of their
CommentOnTicket right.

You might be able to swap out ModifyTicket and use some finer-grained
rights in its place, depending on what modifications end users actually
need to make.

On 13 February 2015 at 04:06, Cena, Stephen (ext. 300) <SJC at qvii.com> wrote:

>  I'm in the process of locking down end-user permissions in our RT
> install. We want it set up so that users can only do Reply, and Admins can
> use Comment and Reply. At present, my "end user" can't see a Comment in a
> ticket, or an attachment made with a Comment. However, if the user emails
> the Comment address or uses the Comment in the Action drop-down in the
> ticket the entry gets made. The proper visibility of the resulting Comment
> is correct. AFAIK, there are no global permissions for anything (I'm doing
> it al at the queue level for each queue).
>
>
> Everyone, Privileged, Unprivileged all have no permissions
> End User perms for queue: CreateTicket, SeeQueue
> Requestor perms for queue: ReplyToTicket, SeeCustomField, SeeQueue,
> ShowTicket, ModifyCustomField, ModifyTicket
>
> Did I overlook something?
>
> Stephen J. Cena
> Supervisor/Systems Administrator - MIS/IT Dept
> Quality Vision International
> 850 Hudson Ave
> Rochester,NY 14620
> Phone: 585-544-0450 x300
> * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
> Please report email problems to: postmaster at qvii.com
>
> QVII MIS/IT Dept - We do what we must because we can.
> "Thank you for helping us help you help us all."
> * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20150213/944c01c8/attachment.htm>