ACL Troubles with RTFM

Hi,

I’m trying to setup RTFM acl’s for some groups and it seem that they
are not enough.

For example, in Config > RTFM > Global > Group Rights i allow the
following to a group of users:
CreateArticle
DeleteArticle
ModifyArticle
ModifyArticleTopics
ModifyCustomField
SeeClass
SeeCustomField
ShowArticle
ShowArticleHistory

However, even after login/logout, thoses users doesn’t have access to
the articles customfields,
If then i had “SeeCustomField” to this group in the global RT
configuration (Configuration > Global > Group Rights)
then they are able to see and use articles contents, but not modify
(need global ModifyCustomField for this to work).

Is it normal ?

Using RT 3.8.8 & RTFM 2.4.2

Hi,

I’m trying to setup RTFM acl’s for some groups and it seem that they
are not enough.

For example, in Config > RTFM > Global > Group Rights i allow the
following to a group of users:
CreateArticle
DeleteArticle
ModifyArticle
ModifyArticleTopics
ModifyCustomField
SeeClass
SeeCustomField
ShowArticle
ShowArticleHistory

However, even after login/logout, thoses users doesn’t have access to
the articles customfields,

What happens if you go to
Configuration -> Custom Fields -> custom field name -> Group Rights?

If then i had “SeeCustomField” to this group in the global RT
configuration (Configuration > Global > Group Rights)
then they are able to see and use articles contents, but not modify
(need global ModifyCustomField for this to work).

Is it normal ?

Using RT 3.8.8 & RTFM 2.4.2

Have you applied the CF to the Classes (using the Applies To link from
the Custom Field page)? There were some bugs with that in 2.4.2 and
3.8.8, so if you haven’t done that you may need to test out the
2.4.3rc1 release on Friday.

-kevin

What happens if you go to
Configuration -> Custom Fields -> custom field name -> Group Rights?

In this case, it’s also working

Have you applied the CF to the Classes (using the Applies To link from
the Custom Field page)?

Yes indeed, this was the way i used

There were some bugs with that in 2.4.2 and
3.8.8, so if you haven’t done that you may need to test out the
2.4.3rc1 release on Friday.

So i’m screwed ?

What happens if you go to
Configuration -> Custom Fields -> custom field name -> Group Rights?

In this case, it’s also working

Ok, this is probably the best way to give those rights
I’m guessing that granting the RTFM global right isn’t creating
something correctly, but I’d have to go look at the ACL record.

Please drop a note into the bugtracker (rtfm-bugs AT
bestpractical.com) about that way of assigning rights not working. It
sounds like we either need to track down the ACL failure or not let
you set that right in that particular screen.

Have you applied the CF to the Classes (using the Applies To link from
the Custom Field page)?

Yes indeed, this was the way i used

There were some bugs with that in 2.4.2 and
3.8.8, so if you haven’t done that you may need to test out the
2.4.3rc1 release on Friday.

So i’m screwed ?

No, there are just 2 ways this can get screwed up (rights and applied
to) and I wanted to rule out the applied to problem (especially since
I knew there was a bug with 3.8.8+2.4.2).

-kevin