CreateSavedSearch question

Hi everyone,

If I understand correctly, with the CreateSavedSearch right (on RT
3.6.6), a user can save searches for himself or any group he belongs to.
WithOUT the CreateSavedSearch right, they can’t even save searches under
’My saved searches’ (the Save Search dialog box doesn’t even show),
correct? This seems an all or nothing approach, no? Is there a way to
allow users to save personal searches, but not group searches?

js.
Jean-Sebastien Morisset, Sr. UNIX Administrator jsmoriss@mvlan.net

Jean-Sebastien,

Yes, that is correct. "ShowSavedSearches" would allow you to see the 

list of available saved searches. “LoadSavedSearch” would allow an
existing one (that you see in the list) to be put into the Edit area.
And “EditSavedSearch” would accept any changes you made from the “edit"
area (or when you hit “Apply” in the “advanced” area), when you hit the
"Save” button in the “Saved Searches” box if the name of the search
alr3eady exists. Hope this helps.

Kenn
LBNLOn 7/30/2008 10:46 AM, Jean-Sebastien Morisset wrote:

Hi everyone,

If I understand correctly, with the CreateSavedSearch right (on RT
3.6.6), a user can save searches for himself or any group he belongs to.
WithOUT the CreateSavedSearch right, they can’t even save searches under
’My saved searches’ (the Save Search dialog box doesn’t even show),
correct? This seems an all or nothing approach, no? Is there a way to
allow users to save personal searches, but not group searches?

js.

Thanks Keen,

I was hoping to allow everyone to created their own personal searches,
but only queue/group admins to create searches for groups. Oh well. :slight_smile:

js.On Wed, Jul 30, 2008 at 11:14:52AM -0700, Kenneth Crocker wrote:

Jean-Sebastien,

Yes, that is correct. “ShowSavedSearches” would allow you to see the
list of available saved searches. “LoadSavedSearch” would allow an
existing one (that you see in the list) to be put into the Edit area.
And “EditSavedSearch” would accept any changes you made from the “edit"
area (or when you hit “Apply” in the “advanced” area), when you hit the
"Save” button in the “Saved Searches” box if the name of the search
alr3eady exists. Hope this helps.

Kenn
LBNL

On 7/30/2008 10:46 AM, Jean-Sebastien Morisset wrote:

Hi everyone,

If I understand correctly, with the CreateSavedSearch right (on RT
3.6.6), a user can save searches for himself or any group he belongs to.
WithOUT the CreateSavedSearch right, they can’t even save searches under
’My saved searches’ (the Save Search dialog box doesn’t even show),
correct? This seems an all or nothing approach, no? Is there a way to
allow users to save personal searches, but not group searches?

js.

Jean-Sebastien Morisset, Sr. UNIX Administrator jsmoriss@mvlan.net

In the User Rights section under the group, you can choose who can edit
or show searches. With a little work you could probably create a right
in groups for create.

Jean-Sebastien Morisset wrote:

Thanks Keen,

I was hoping to allow everyone to created their own personal searches,
but only queue/group admins to create searches for groups. Oh well. :slight_smile:

js.

Jean-Sebastien,

Yes, that is correct. “ShowSavedSearches” would allow you to see the
list of available saved searches. “LoadSavedSearch” would allow an
existing one (that you see in the list) to be put into the Edit area.
And “EditSavedSearch” would accept any changes you made from the “edit"
area (or when you hit “Apply” in the “advanced” area), when you hit the
"Save” button in the “Saved Searches” box if the name of the search
alr3eady exists. Hope this helps.

Kenn
LBNL

Hi everyone,

If I understand correctly, with the CreateSavedSearch right (on RT
3.6.6), a user can save searches for himself or any group he belongs to.
WithOUT the CreateSavedSearch right, they can’t even save searches under
’My saved searches’ (the Save Search dialog box doesn’t even show),
correct? This seems an all or nothing approach, no? Is there a way to
allow users to save personal searches, but not group searches?

js.

Drew Barnes
Applications Analyst
Network Resources Department
Raymond Walters College
University of Cincinnati

Jean-Sebastion,

Actually, that's just what RT defaults to. We have all the "Create, 

Show, etc." Search privileges applied globally to “Privileged” Users. RT
automatically let’s you “See” what’s in your personal “My Saved
Searches” list and will also list any saved searches that have been
saved under any group/queue list (provided the group they are in has
privileges to that queue). If you are in that group, you will see that
list. So I think you are OK in that manner.
RT privileges work in a hierarchical & matrixed manner. Just because
you are given the ability to create a search, doesn’t mean you have
access to data in a queue. To access data, you have to be in a group
that has “SeeQueue” and “ShowTicketData”, as well as have
"SeeCustomField" for any Custom Fields applied to tickets in that Queue.
Then you can not only create a search, but GET the results you want. By
granting all those “Search” rights globally, we did NOT grant the
privileges to see all the data in all the queues. That is taken care of
by the “Group Rights” for a given Queue. RT defaults to those settings
when it comes to actually accessing that data. The information on
Searches and what they are looking for are in a different table (the
ATTRIBUTES Table) than Tickets (the TICKET Table), Groups (the GROUPS,
GROUPMEMBERS, and CACHEDGROUPMEMBERS Tables) and Rights (the ACL
table). I Hope this helps.

Kenn
LBNLOn 7/30/2008 11:39 AM, Jean-Sebastien Morisset wrote:

Thanks Keen,

I was hoping to allow everyone to created their own personal searches,
but only queue/group admins to create searches for groups. Oh well. :slight_smile:

js.

On Wed, Jul 30, 2008 at 11:14:52AM -0700, Kenneth Crocker wrote:

Jean-Sebastien,

Yes, that is correct. “ShowSavedSearches” would allow you to see the
list of available saved searches. “LoadSavedSearch” would allow an
existing one (that you see in the list) to be put into the Edit area.
And “EditSavedSearch” would accept any changes you made from the “edit"
area (or when you hit “Apply” in the “advanced” area), when you hit the
"Save” button in the “Saved Searches” box if the name of the search
alr3eady exists. Hope this helps.

Kenn
LBNL

On 7/30/2008 10:46 AM, Jean-Sebastien Morisset wrote:

Hi everyone,

If I understand correctly, with the CreateSavedSearch right (on RT
3.6.6), a user can save searches for himself or any group he belongs to.
WithOUT the CreateSavedSearch right, they can’t even save searches under
’My saved searches’ (the Save Search dialog box doesn’t even show),
correct? This seems an all or nothing approach, no? Is there a way to
allow users to save personal searches, but not group searches?

js.