Batching queue rights | Automatisierte Queue Rechte vergabe

RT Users
1

Hi,
i must share many rights over Configure > Queues > Queue name > GroupRights.
I have 26 Queues with 28 Groups. I don’t want to klick on every queue an
delegate them rights. Is there a way of batching rights to Queues? Perhaps
with the CLI?

regards Michael

Hallo!
Ich suche einen Weg meinen ca. 26 Bereichen und über 28 Gruppen per Batch
z.B. Rechte zu zuweisen. Gibt es da vielleicht eine möglichkeit über das
CLI oder ähnliches?

Grüße Michael

2

Hi Michael,
there is a good RTx from Todd Chapman called RTx-RightsMatrix which can
display and change rights wihtin one screen. From CLI you can code your own.
Search the Mailing list for a post from Alexander Krieg, he offers there a
scrip which does this for initial setup, i think you can use many things and
ideas from his code.

Search for:
[rt-users] Scripts to create a queue,groups and users
Torsten2008/11/17 Michael Bieniek michael@bilderhelden.de

Hi,
i must share many rights over Configure > Queues > Queue name >
GroupRights. I have 26 Queues with 28 Groups. I don’t want to klick on every
queue an delegate them rights. Is there a way of batching rights to Queues?
Perhaps with the CLI?

regards Michael

Hallo!
Ich suche einen Weg meinen ca. 26 Bereichen und über 28 Gruppen per Batch
z.B. Rechte zu zuweisen. Gibt es da vielleicht eine möglichkeit über das
CLI oder ähnliches?

Grüße Michael

The rt-users Archives

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

MFG

Torsten Brumm

http://www.torsten-brumm.de

3

i must share many rights over Configure > Queues > Queue name > GroupRights.
I have 26 Queues with 28 Groups. I don’t want to click on every queue an
delegate them rights. Is there a way of batching rights to Queues? Perhaps
with the CLI?

That would be nice, wouldn’t it?

I took a stab at solving this myself, and the solution I came up with
worked but was really ugly – it required adding a new table to the RT
database, and then some Perl code that interacts with the db directly
rather than through the RT API. The way it works:

  • Create a new table called “acl_profiles”.

  • Populate this table with tuples of the form (profile name, right name)

  • Write code that, given the name of an acl profile, looks up all the
    rights associated with this name in acl_profiles and applies them to
    the named queue. This worked by updating the ACL table directly.

It is unstable, untested, only available from the command line, and
I’m not using it anymore. If you’d like I can send you what I’ve got,
but unless you’re a developer it will probably not meet your needs.
The fact that it modifies the database directly and not through the RT
API means that it’s almost guaranteed to do the wrong thing at some
point.

I see Torsten’s response came in while I was writing this, and that
probably points to cleaner solutions.

Lars Kellogg-Stedman lars@oddbit.com