Restrict GUEST user

RT Users
1

I am setting up RT 3.4.1 on Oracle 9i, using Fedora to use internally,
(migrating from WREQ 2.7).
I decided to only use the web interface for creating tickets, so I can have
requestor populate custom fields for each queue…
To accomplish this, without the hassle of pre-loading everyone into the
system, I have created an ‘unprivileged’ guest user that can see queues and
can create tickets. I have also added the autocreate user for all new
requestors with the auto-generated password being emailed.

There are 2 problems I have.

  1. Since I want these new users to be able to change their passwords once
    their accounts have been created, I need to give the ‘unprivileged’ user
    ModifySelf, but this also leaves the door open for anyone to change the
    guest account’s password. So I’d like to be able to add the restriction so
    the ‘guest’ user doesn’t have this permission.
  2. Since it is the guest user who is the ‘Creator’ of the ticket for new
    users, but guest isn’t the ‘Requestor’, it gives an error, saying ‘RT user
    doesn’t have permission to view the created ticket #1234’. I don’t want to
    open the door to give everyone access to SeeTicket, because that will allow
    them to see all tickets. But I’d like to either change this message or have
    the page open at the ‘CreateTicketInQueue’ page instead of trying to
    display the ticket.

Steve McStravick

I.S.
BreconRidge Manufacturing Solutions
500 Palladium Drive
Ottawa, ON K2V1C2

Steve McStravick

I.S.
BreconRidge Manufacturing Solutions
500 Palladium Drive
Ottawa, ON K2V1C2
613-886-6842