Currently, when a user who only has viewing privs in one queue does a
search without changing the default queue in the search, they can view
all tickets in all queues.
Is this a permission change I need to make or is it unavoidable without
making a change to the code function.
We are using RT 3.2.1
Peter Musolino
Systems Engineer
D.B. Zwirn & Co., LP
745 5th Ave.
18th Fl.
New York, NY 10151
Tel: (646) 720-9161
This e-mail message is intended only for the named recipient(s) above. It may contain confidential information. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender by replying to this e-mail and delete the message and any attachment(s) from your system. Thank you.
You have given the ShowTicket right in more than the queue
that they need the right for.On Fri, Mar 18, 2005 at 03:39:20PM -0500, Musolino, Peter wrote:
Currently, when a user who only has viewing privs in one queue does a
search without changing the default queue in the search, they can view
all tickets in all queues.
Is this a permission change I need to make or is it unavoidable without
making a change to the code function.
We are using RT 3.2.1
Peter Musolino
Systems Engineer
D.B. Zwirn & Co., LP
745 5th Ave.
18th Fl.
New York, NY 10151
Tel: (646) 720-9161
This e-mail message is intended only for the named recipient(s) above. It may contain confidential information. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender by replying to this e-mail and delete the message and any attachment(s) from your system. Thank you.
The rt-users Archives
RT Administrator and Developer training is coming to your town soon! (Boston, San Francisco, Austin, Sydney) Contact training@bestpractical.com for details.
Be sure to check out the RT Wiki at http://wiki.bestpractical.com
Thanks, that was the problem.
I had previously had several queues have the ShowTicket option for
Unprivileged users and Everyone which made the search show up with
tickets they should not have been able to see. It makes the tickets
invisible, but instead of the search returning 0 tickets, it keeps the
Next Page and Last Page links up implying there are items there. This
is behavior is fine with me as it does not affect our operations.
Thanks again,
PeterFrom: Todd Chapman [mailto:todd@chaka.net]
Sent: Friday, March 18, 2005 3:47 PM
To: Musolino, Peter
Cc: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] Modifying Search privileges
You have given the ShowTicket right in more than the queue
that they need the right for.
Currently, when a user who only has viewing privs in one queue does a
search without changing the default queue in the search, they can view
all tickets in all queues.
Is this a permission change I need to make or is it unavoidable
without
making a change to the code function.
We are using RT 3.2.1
The rt-users Archives
RT Administrator and Developer training is coming to your town soon!
(Boston, San Francisco, Austin, Sydney) Contact
training@bestpractical.com for details.
Be sure to check out the RT Wiki at http://wiki.bestpractical.com
This e-mail message is intended only for the named recipient(s) above. It may contain confidential information. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender by replying to this e-mail and delete the message and any attachment(s) from your system. Thank you.
I had previously had several queues have the ShowTicket option for
Unprivileged users and Everyone which made the search show up with
tickets they should not have been able to see. It makes the tickets
invisible, but instead of the search returning 0 tickets, it keeps the
Next Page and Last Page links up implying there are items there. This
is behavior is fine with me as it does not affect our operations.
It seems to me that a debug mode that shows why someone could see a
page might be useful; dumped into an HTML comment in the returned page,
maybe?
How hard would that be to code, folks?
Cheers,
– jra
Jay R. Ashworth jra@baylink.com
Designer Baylink RFC 2100
Ashworth & Associates The Things I Think '87 e24
St Petersburg FL USA http://baylink.pitas.com +1 727 647 1274
If you can read this... thank a system adminstrator. Or two. --me