A question about saved search privileges.
It looks like the query builder will allow users to save & load searches for
a) themselves
b) groups of which they are a member
(This assumes the user has global CreateSavedSearch and LoadSavedSearch
rights).
Now, on the group UserRights screen, it is possible to assign
EditSavedSearches and ShowSavedSearches rights to a user.
My question is, what do these rights mean? Where do they come into play?
They seem to imply that you can give access to group saved searches via
these rights, but in fact this access is controlled by group membership,
not ACLs.
Any help gratefully received.
Thanks,
Steve
Stephen Turner
Senior Programmer/Analyst - Client Support Services
Information Services and Technology (IS&T)
sturner@mit.edu
A question about saved search privileges.
Can you provide more details as to what problem you’re having or what
your desired end-result is?
Andy Harrison
I have also been trying these rights out and am confused. We would
like to give one group of users the ability to create saved searches
only under ‘My Saved Searches’ and another goup with the ability to
save under the ‘My GroupName Saved Searches’. We would like both
groups to have the ability to load and see both (Their own and group
defined SavedSearches). The idea being that we don’t want working
group searches changed by a user who is testing something. I thought
that since the rights were in the global as well as the group (edit
and show) that we might be able to do this. However I have been unable
to distinguish how these rights work differently (from global or group
levels against a defined user group). It seems that if any of the four
rights is enabled in either place it applies to both categories
equally.
So I have two questions: Is is possible to restrict group edits and
creates and still allow a user to create/edit in ‘My Saved Searches’.
and how to the two locations with the rights differ?On Sat, 22 Jan 2005 09:27:55 -0500, Andy Harrison aharrison@gmail.com wrote:
On Fri, 21 Jan 2005 14:57:06 -0500, Stephen Turner sturner@mit.edu wrote:
A question about saved search privileges.
Can you provide more details as to what problem you’re having or what
your desired end-result is?
–
Andy Harrison
The rt-users Archives
RT Administrator and Developer training is coming to your town soon! (Boston, San Francisco, Austin, Sydney) Contact training@bestpractical.com for details.
Be sure to check out the RT Wiki at http://wiki.bestpractical.com
I have also been trying these rights out and am confused. We would
I’m still a little confused at what you’re getting. It works fine for
me though, so I’ll tell you how I have it set up.
I have very little in the global group permissions section, basically
just management has EditSavedSearches. No global user rights at all.
Then the rights are doled out under the individual groups. I have a
group “Support” (a collection of related groups) that has
ShowSavedSearches. Group CSS_TL (customer service team leaders group)
is a member of Support, but the CSS_TL has EditSavedSearches right
where Support does not.
HTH.
Andy Harrison
Andy,
Thanks for the input. After much time spent on this issue, I have
concluded that it is impossible to grant a user (who belongs to any
group) privileges only to save to ‘My Saved Searches’. The problem
seems to be that in order to save at all, one must have modifyself and
loadsavedsearches (the latter which is only available through global
group access). Group access only has show and edit. So if a user
belongs to any group or subgroup, all the groups show in the dialog
box and they can save or edit. It looks to me like its all or nothing
in terms of capability. One can’t see the saved searches unless the
loadsavedsearches is grated. And once this is enabled, the user can
save or edit all the searches in all groups they are a member of or
none of them.
I think this correct but maybe I am still overlooking something. At
anyrate this will do for us at this point as we are now directing our
attention to integration with Bugzilla which is a top priority for
management. I’ll probably be begging for help on this soon.
Thanks again,
StephenOn Sun, 23 Jan 2005 11:27:56 -0500, Andy Harrison aharrison@gmail.com wrote:
On Sat, 22 Jan 2005 12:28:14 -0500, Stephen Hancock sh.hancock@gmail.com wrote:
I have also been trying these rights out and am confused. We would
I’m still a little confused at what you’re getting. It works fine for
me though, so I’ll tell you how I have it set up.
I have very little in the global group permissions section, basically
just management has EditSavedSearches. No global user rights at all.
Then the rights are doled out under the individual groups. I have a
group “Support” (a collection of related groups) that has
ShowSavedSearches. Group CSS_TL (customer service team leaders group)
is a member of Support, but the CSS_TL has EditSavedSearches right
where Support does not.
HTH.
–
Andy Harrison