Are any users explicitly granted SuperUser rights? If not, the system
may reject the attempt to remove it from everyone as that would leave no
Tim Thomas wrote:
Hmm, I have tried this with 2 log-ins including root (see attached)
and no luck. Any other suggestions, or thoughts on manually revoking
this in the DB?
Just made a test: granted everyone with SuperUser, then revoked it and
everything went fine. I do believe that RT can refuse such operation
if user has no personal SuperUser right when you’re revoking global.
We are refining our security needs now as we expand, and want to
revoke the global “superuser” right for the group “everyone”, but RT
refuses to revoke that right. I am logged in as root, and are using
RT 3.8.1. Any suggestions short of going into the database to change
Community help: http://wiki.bestpractical.com
Commercial support: email@example.com
Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com
Network Resources Department
Raymond Walters College
University of Cincinnati