Error with ACL?

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)

Permissions are not checked when rendering the links, only when the
action is attempted.On 11/29/07, Max Clark max.clark@gmail.com wrote:

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Okay - I can live with the links still appearing, but I can reply
(correspond) on the ticket even without the ReplyToTicket permission.
That is a problem.On Nov 29, 2007 2:48 PM, Todd Chapman todd@chaka.net wrote:

Permissions are not checked when rendering the links, only when the
action is attempted.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

The extension RTx::RightsMatrix can help you understand how any
individual has gained rights in RT. Plus, the author is a really cool
guy. :wink:

http://search.cpan.org/~htchapman/RTx-RightsMatrix-0.03.00/lib/RTx/RightsMatrix.pmOn 11/29/07, Max Clark max.clark@gmail.com wrote:

Okay - I can live with the links still appearing, but I can reply
(correspond) on the ticket even without the ReplyToTicket permission.
That is a problem.

On Nov 29, 2007 2:48 PM, Todd Chapman todd@chaka.net wrote:

Permissions are not checked when rendering the links, only when the
action is attempted.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Todd,

Great tool - unfortunately the display show the rights that I expect
to see - no user or group has ReplyToTicket rights on this queue. What
else should I be looking at?

Thanks,
MaxOn 11/29/07, Todd Chapman todd@chaka.net wrote:

The extension RTx::RightsMatrix can help you understand how any
individual has gained rights in RT. Plus, the author is a really cool
guy. :wink:

RTx::RightsMatrix - Bulk editing GUI for RT rights - metacpan.org

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Okay - I can live with the links still appearing, but I can reply
(correspond) on the ticket even without the ReplyToTicket permission.
That is a problem.

On Nov 29, 2007 2:48 PM, Todd Chapman todd@chaka.net wrote:

Permissions are not checked when rendering the links, only when the
action is attempted.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Max,

I just reviewed the relevant RT code:

sub Correspond {
my $self = shift;
my %args = ( CcMessageTo => undef,
BccMessageTo => undef,
MIMEObj => undef,
Content => undef,
TimeTaken => 0,
@_ );

unless (    ( $self->CurrentUserHasRight('ReplyToTicket') )
         or ( $self->CurrentUserHasRight('ModifyTicket') ) ) {
    return ( 0, $self->loc("Permission Denied"), undef );
}

As you can see, ModifyTicket is all you need to reply to a ticket. I
don’t know why that is but you could change the code.On 11/29/07, Max Clark max.clark@gmail.com wrote:

Todd,

Great tool - unfortunately the display show the rights that I expect
to see - no user or group has ReplyToTicket rights on this queue. What
else should I be looking at?

Thanks,
Max

On 11/29/07, Todd Chapman todd@chaka.net wrote:

The extension RTx::RightsMatrix can help you understand how any
individual has gained rights in RT. Plus, the author is a really cool
guy. :wink:

RTx::RightsMatrix - Bulk editing GUI for RT rights - metacpan.org

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Okay - I can live with the links still appearing, but I can reply
(correspond) on the ticket even without the ReplyToTicket permission.
That is a problem.

On Nov 29, 2007 2:48 PM, Todd Chapman todd@chaka.net wrote:

Permissions are not checked when rendering the links, only when the
action is attempted.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Isn’t this a bug? Or is it really intended for ModifyTicket to have
ReplyToTicket rights?

-Max

(Patch attached)On Nov 30, 2007 5:41 AM, Todd Chapman todd@chaka.net wrote:

Max,

I just reviewed the relevant RT code:

sub Correspond {
my $self = shift;
my %args = ( CcMessageTo => undef,
BccMessageTo => undef,
MIMEObj => undef,
Content => undef,
TimeTaken => 0,
@_ );

unless (    ( $self->CurrentUserHasRight('ReplyToTicket') )
         or ( $self->CurrentUserHasRight('ModifyTicket') ) ) {
    return ( 0, $self->loc("Permission Denied"), undef );
}

As you can see, ModifyTicket is all you need to reply to a ticket. I
don’t know why that is but you could change the code.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Todd,

Great tool - unfortunately the display show the rights that I expect
to see - no user or group has ReplyToTicket rights on this queue. What
else should I be looking at?

Thanks,
Max

On 11/29/07, Todd Chapman todd@chaka.net wrote:

The extension RTx::RightsMatrix can help you understand how any
individual has gained rights in RT. Plus, the author is a really cool
guy. :wink:

RTx::RightsMatrix - Bulk editing GUI for RT rights - metacpan.org

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Okay - I can live with the links still appearing, but I can reply
(correspond) on the ticket even without the ReplyToTicket permission.
That is a problem.

On Nov 29, 2007 2:48 PM, Todd Chapman todd@chaka.net wrote:

Permissions are not checked when rendering the links, only when the
action is attempted.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

ticket_overlay.patch (449 Bytes)

Max,

Why would it be considered a bug? Wouldn't the person making changes be 

a person of interest? Wouldn’t any person of interest want to know what
is going on about a ticket?

Kenn
LBNLOn 11/30/2007 10:26 AM, Max Clark wrote:

Isn’t this a bug? Or is it really intended for ModifyTicket to have
ReplyToTicket rights?

-Max

(Patch attached)

On Nov 30, 2007 5:41 AM, Todd Chapman todd@chaka.net wrote:

Max,

I just reviewed the relevant RT code:

sub Correspond {
my $self = shift;
my %args = ( CcMessageTo => undef,
BccMessageTo => undef,
MIMEObj => undef,
Content => undef,
TimeTaken => 0,
@_ );

unless (    ( $self->CurrentUserHasRight('ReplyToTicket') )
         or ( $self->CurrentUserHasRight('ModifyTicket') ) ) {
    return ( 0, $self->loc("Permission Denied"), undef );
}

As you can see, ModifyTicket is all you need to reply to a ticket. I
don’t know why that is but you could change the code.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Todd,

Great tool - unfortunately the display show the rights that I expect
to see - no user or group has ReplyToTicket rights on this queue. What
else should I be looking at?

Thanks,
Max

On 11/29/07, Todd Chapman todd@chaka.net wrote:

The extension RTx::RightsMatrix can help you understand how any
individual has gained rights in RT. Plus, the author is a really cool
guy. :wink:

RTx::RightsMatrix - Bulk editing GUI for RT rights - metacpan.org

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Okay - I can live with the links still appearing, but I can reply
(correspond) on the ticket even without the ReplyToTicket permission.
That is a problem.

On Nov 29, 2007 2:48 PM, Todd Chapman todd@chaka.net wrote:

Permissions are not checked when rendering the links, only when the
action is attempted.

On 11/29/07, Max Clark max.clark@gmail.com wrote:

Hello,

I want to assign permissions for a group to be able to manage tickets
in a queue and comment on them but not reply. I’ve assigned the group
the following rights on the queue:

CommentOnTicket
CreateTicket
DeleteTicket
OwnTicket
SeeQueue
ShowOutgoingEmail
ShowTicket
ShowTicketComments
StealTicket
TakeTicket
Watch
WatchAsAdminCc

(Note absense of “ReplyToTicket”)

However when I login as a user in this group and view a ticket I still
see options/links to and the ability to reply. What am I missing here?

Thanks,
Max

(I’m running version 3.6.5)


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com



The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in touch today.
Email us at sales@bestpractical.com or call us at +1 617 812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Why would it be considered a bug? Wouldn’t the person making changes be
a person of interest? Wouldn’t any person of interest want to know what
is going on about a ticket?

What has that have to do with the rights to ReplyToTicket? I am not
talking about Watcher, AdminCC, or CC privileges here. I am talking
about the right for a user to reply to a ticket and send
correspondence. To me ModifyTicket != ReplyToTicket just like it
shouldn’t mean CommentOnTicket or DeleteTicket and that’s why I
perceive this as a bug.

My permissions requirements for this Queue are straightforward. I need
to assign rights for a group to view, modify (reassign, move,
associate, close), and comment on a ticket. This should be
accomplished by setting CommentOnTicket, ModifyTicket, OwnTicket,
SeeQueue, ShowTicket, ShowTicketComments, StealTicket, TakeTicket,
Watch, and WatchAsAdminCc. What was discovered is that ModifyTicket
inherits ReplyToTicket rights which should not happen.

-Max

Max,

Well, good news for you, ModifyTicket also inherits CommentOnTicket and 

I think even DeleteTicket.

Kenn
LBNLOn 11/30/2007 11:14 AM, Max Clark wrote:

Why would it be considered a bug? Wouldn’t the person making changes be
a person of interest? Wouldn’t any person of interest want to know what
is going on about a ticket?

What has that have to do with the rights to ReplyToTicket? I am not
talking about Watcher, AdminCC, or CC privileges here. I am talking
about the right for a user to reply to a ticket and send
correspondence. To me ModifyTicket != ReplyToTicket just like it
shouldn’t mean CommentOnTicket or DeleteTicket and that’s why I
perceive this as a bug.

My permissions requirements for this Queue are straightforward. I need
to assign rights for a group to view, modify (reassign, move,
associate, close), and comment on a ticket. This should be
accomplished by setting CommentOnTicket, ModifyTicket, OwnTicket,
SeeQueue, ShowTicket, ShowTicketComments, StealTicket, TakeTicket,
Watch, and WatchAsAdminCc. What was discovered is that ModifyTicket
inherits ReplyToTicket rights which should not happen.

-Max

:slight_smile: Fantastic! So I guess this means that I get to learn alot about the
internals of RT as I prepare a large patch.On Nov 30, 2007 11:50 AM, Kenneth Crocker KFCrocker@lbl.gov wrote:

Max,

    Well, good news for you, ModifyTicket also inherits CommentOnTicket and

I think even DeleteTicket.

Kenn
LBNL

On 11/30/2007 11:14 AM, Max Clark wrote:

Why would it be considered a bug? Wouldn’t the person making changes be
a person of interest? Wouldn’t any person of interest want to know what
is going on about a ticket?

What has that have to do with the rights to ReplyToTicket? I am not
talking about Watcher, AdminCC, or CC privileges here. I am talking
about the right for a user to reply to a ticket and send
correspondence. To me ModifyTicket != ReplyToTicket just like it
shouldn’t mean CommentOnTicket or DeleteTicket and that’s why I
perceive this as a bug.

My permissions requirements for this Queue are straightforward. I need
to assign rights for a group to view, modify (reassign, move,
associate, close), and comment on a ticket. This should be
accomplished by setting CommentOnTicket, ModifyTicket, OwnTicket,
SeeQueue, ShowTicket, ShowTicketComments, StealTicket, TakeTicket,
Watch, and WatchAsAdminCc. What was discovered is that ModifyTicket
inherits ReplyToTicket rights which should not happen.

-Max

Nope, sorry, DeleteTicket is NOT inherited with the ModifyTicket right.

Kenn
LBNLOn 11/30/2007 11:50 AM, Kenneth Crocker wrote:

Max,

Well, good news for you, ModifyTicket also inherits CommentOnTicket 

and I think even DeleteTicket.

Kenn
LBNL

On 11/30/2007 11:14 AM, Max Clark wrote:

Why would it be considered a bug? Wouldn’t the person making changes be
a person of interest? Wouldn’t any person of interest want to know what
is going on about a ticket?

What has that have to do with the rights to ReplyToTicket? I am not
talking about Watcher, AdminCC, or CC privileges here. I am talking
about the right for a user to reply to a ticket and send
correspondence. To me ModifyTicket != ReplyToTicket just like it
shouldn’t mean CommentOnTicket or DeleteTicket and that’s why I
perceive this as a bug.

My permissions requirements for this Queue are straightforward. I need
to assign rights for a group to view, modify (reassign, move,
associate, close), and comment on a ticket. This should be
accomplished by setting CommentOnTicket, ModifyTicket, OwnTicket,
SeeQueue, ShowTicket, ShowTicketComments, StealTicket, TakeTicket,
Watch, and WatchAsAdminCc. What was discovered is that ModifyTicket
inherits ReplyToTicket rights which should not happen.

-Max


The rt-users Archives

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we’ll take
up to 20 percent off the price. This sale won’t last long, so get in
touch today. Email us at sales@bestpractical.com or call us at +1 617
812 0745.

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media. Buy
a copy at http://rtbook.bestpractical.com

I doubt your patch would be accepted by Jesse. Chances are this isn’t
a result of some mistake. I’m willing to be that in his view Comment
and Reply both modify the ticket so the ability to do those things is
implied by the ModifyTicket right. I would recommend doing an _Local
overlay to accomplish what you want.

Come to think of it, when a ticket is replied to there are other
fields in the ticket that are updated. Certain timestamp fields and
also TimeWorked I think. Those would all fail if you could reply to
the ticket but not modify it.

-ToddOn 11/30/07, Max Clark max.clark@gmail.com wrote:

:slight_smile: Fantastic! So I guess this means that I get to learn alot about the
internals of RT as I prepare a large patch.

On Nov 30, 2007 11:50 AM, Kenneth Crocker KFCrocker@lbl.gov wrote:

Max,

    Well, good news for you, ModifyTicket also inherits CommentOnTicket and

I think even DeleteTicket.

Kenn
LBNL

On 11/30/2007 11:14 AM, Max Clark wrote:

Why would it be considered a bug? Wouldn’t the person making changes be
a person of interest? Wouldn’t any person of interest want to know what
is going on about a ticket?

What has that have to do with the rights to ReplyToTicket? I am not
talking about Watcher, AdminCC, or CC privileges here. I am talking
about the right for a user to reply to a ticket and send
correspondence. To me ModifyTicket != ReplyToTicket just like it
shouldn’t mean CommentOnTicket or DeleteTicket and that’s why I
perceive this as a bug.

My permissions requirements for this Queue are straightforward. I need
to assign rights for a group to view, modify (reassign, move,
associate, close), and comment on a ticket. This should be
accomplished by setting CommentOnTicket, ModifyTicket, OwnTicket,
SeeQueue, ShowTicket, ShowTicketComments, StealTicket, TakeTicket,
Watch, and WatchAsAdminCc. What was discovered is that ModifyTicket
inherits ReplyToTicket rights which should not happen.

-Max

Thank you. That’s what I was referring to.

Kenn
LBNLOn 11/30/2007 12:17 PM, Todd Chapman wrote:

I doubt your patch would be accepted by Jesse. Chances are this isn’t
a result of some mistake. I’m willing to be that in his view Comment
and Reply both modify the ticket so the ability to do those things is
implied by the ModifyTicket right. I would recommend doing an _Local
overlay to accomplish what you want.

Come to think of it, when a ticket is replied to there are other
fields in the ticket that are updated. Certain timestamp fields and
also TimeWorked I think. Those would all fail if you could reply to
the ticket but not modify it.

-Todd

On 11/30/07, Max Clark max.clark@gmail.com wrote:

:slight_smile: Fantastic! So I guess this means that I get to learn alot about the
internals of RT as I prepare a large patch.

On Nov 30, 2007 11:50 AM, Kenneth Crocker KFCrocker@lbl.gov wrote:

Max,

    Well, good news for you, ModifyTicket also inherits CommentOnTicket and

I think even DeleteTicket.

Kenn
LBNL

On 11/30/2007 11:14 AM, Max Clark wrote:

Why would it be considered a bug? Wouldn’t the person making changes be
a person of interest? Wouldn’t any person of interest want to know what
is going on about a ticket?
What has that have to do with the rights to ReplyToTicket? I am not
talking about Watcher, AdminCC, or CC privileges here. I am talking
about the right for a user to reply to a ticket and send
correspondence. To me ModifyTicket != ReplyToTicket just like it
shouldn’t mean CommentOnTicket or DeleteTicket and that’s why I
perceive this as a bug.

My permissions requirements for this Queue are straightforward. I need
to assign rights for a group to view, modify (reassign, move,
associate, close), and comment on a ticket. This should be
accomplished by setting CommentOnTicket, ModifyTicket, OwnTicket,
SeeQueue, ShowTicket, ShowTicketComments, StealTicket, TakeTicket,
Watch, and WatchAsAdminCc. What was discovered is that ModifyTicket
inherits ReplyToTicket rights which should not happen.

-Max