Rights problem in RT

We have noticed that some pages in our RT-3.8.8 installation have
started to load slowly. It turns out that on pages which presents a menu
for Ticket Owner, the menu has become much larger than it used to be. It
is now populated with thousands of entries! Almost equal to the total
number of users (privileged and unprivileged) in our database. We only
have around 100 privileged users. The page for building a New Search from
scratch has this problem.

Looking at the code I see that RT tries to identify users which have the
’OwnTicket’ right, and displays these in the menu:

my $Users = RT::Users->new( $session{CurrentUser} );
$Users->WhoHaveRight(
    Right               => 'OwnTicket',
    Object              => $object,
    IncludeSystemRights => 1,
    IncludeSuperusers   => $isSU
);

This call returns many more users than expected.

The ‘OwnTicket’ right had not been granted explicitly to any user or
group, I tried to to assign this right explicitly, but that did not fix
the problem. The System group ‘Everyone’ only has the rights
CommentOnTicket, CreateTicket, ReplyToTicket.

Any hints on how to resolve this problem?

  • Vegard V -

May be you granted this right to requestors role in some queue. Select
directly from ACL table to list all AC entries with that right.

Regards, Ruslan. From phone.
08.09.2011 10:30 пользователь “Vegard Vesterheim” <
vegard.vesterheim@uninett.no> написал:

May be you granted this right to requestors role in some queue. Select
directly from ACL table to list all AC entries with that right.

Yup, you are right. Querying the ACL table showed that someone recently
had defined a new queue with the OwnTicket right assigned to Everyone!
Removing that right solved the problem. Thank you for the hint.

  • Vegard V -