How to create a read-only account

Hi, everyone.

I’m using RT 3.2.1, and was toying around with creating a "read-only"
account that could be used between people for whom we haven’t (yet)
created individual RT accounts. The idea is that they could use it to
look at the queue, but not to do anything else.

Unfortunately, any user with (or without) privileges automatically
gets “CommentOnTicket”, “CreateTicket”, “ReplyToTicket” and "SeeQueue"
rights which we granted to “Everyone” (and which are needed to make
the automatic ticket creation via mailgate work for users that are not
already registered).

Is there a way to e.g. restrict a user from entering questions via the
Web interface, without breaking desired mailgate behavior? If not, is
there some other way to make this idea workable?

–bert

PS. In other news, the second “Language” option (in the
User/Prefs.html page for any user) shows up as

    "malkovich") (English (Subform)

in several browsers (Firebird, Mozilla, IE). Which is amusing, but
perhaps also a bug. =) Anyone else see this?

Unfortunately, any user with (or without) privileges automatically
gets “CommentOnTicket”, “CreateTicket”, “ReplyToTicket” and "SeeQueue"
rights which we granted to “Everyone” (and which are needed to make
the automatic ticket creation via mailgate work for users that are not
already registered).

For the mailgate, You only need “CreateTicket” for Everyone.
You might want to set “ReplyToTicket” for the “Requestor” Pseudo User.

Regards,
Harald