Googleish owner privileged

Hi all. Why is it that an owner specified in a simple search must be a
privileged user to return results. I’ve found that I can change this
behavior by changing this clause:

    # Is there a owner named $key?
    elsif ( $User = RT::User->new( $self->TicketsObj->CurrentUser )
        and $User->Load($key)
        #and $User->Privileged 
            )
    {
        push @owner_clauses, "Owner = '" . $User->Name . "'";
    }

You see I’ve commented out a line. I only did this as a test. There
must be a good reason behind this that I’m not seeing. Can someone shed
some light?

Thanks!

David Smithson
ActivSupport, Inc.
Your Flexible IT Partner
Microsoft Gold Partner – Small Business Specialist

Director of Technical Services
Direct: (415) 869 2991
Technical Support Hotline: (415) 979 9285
CLICK HERE FOR ONLINE SUPPORT

Î

Hi all. Why is it that an owner specified in a simple search must
be a
privileged user to return results.

So. How did you end up with non-privileged owners? That’s very much
outside the “regular” flow of RT.

Î

PGP.sig (186 Bytes)

Doh! slaps self

I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use the RT API.
I will always use …

David Smithson

CLICK HERE FOR ONLINE SUPPORTFrom: Jesse Vincent [mailto:jesse@bestpractical.com]
Sent: Monday, July 31, 2006 9:34 AM
To: David Smithson
Cc: rt-devel@lists.bestpractical.com
Subject: Re: [Rt-devel] Googleish owner privileged

Î

Hi all. Why is it that an owner specified in a simple search must
be a
privileged user to return results.

So. How did you end up with non-privileged owners? That’s very much
outside the “regular” flow of RT.

Î

Jesse Vincent wrote:> On Jul 29, 2006, at 10:29 PM, David Smithson wrote:

Hi all. Why is it that an owner specified in a simple search must be a
privileged user to return results.

So. How did you end up with non-privileged owners? That’s very much
outside the “regular” flow of RT.

Not that hard actually. You only need to remove the privileged flag from
a user that owns a ticket. One might do that when removing the Enabled
flag and being overzealous.

Now, whether a simple search should actually find the tickets this
user owns is debatable. I can confirm that right now, it doesn’t, but I
guess you knew that, since there’s an explicit test in the search code.

And on a side note: If that user didn’t have the OwnTicket Right
(because he was SuperUser), you even need a small patch to be able to
select him as Owner in the Query Builder (which does find the tickets).

Best regards,
Rolf