after upgrading RT from 5.0.8 to 6.0.0 this error appears in the syslog when trying to change global group rights:
Jun 9 19:14:03 rtdev RT: [674377] Invalid right. Couldn’t canonicalize right ‘ShowSavedSearches’
Jun 9 19:14:03 rtdev RT: [674377] Invalid right. Couldn’t canonicalize right ‘CreateSavedSearch’
I think they are old permissions no longer present in the new version
Correct, some rights were changed in RT 6 as described in the upgrading notes (search for SeeSavedSearch). We’re reviewing to see if there might be a way some updates to right names might not be covered in the upgrade scripts. When you see these messages, is it for rights assigned to a group?
Yes, when I change permissions in admin, global, group rights, these messages appear:
Invalid right. Cannot canonize the right ‘ShowSavedSearches’
Invalid right. Cannot canonize the right ‘CreateSavedSearch’
These were permissions that I had set before, but now I can’t remove them because they no longer exist
Hi, searching for SeeSavedSearch…
grep -r SeeSavedSearch
etc/upgrade/5.9.4/content: Right => 'SeeSavedSearch',
etc/initialdata: Right => 'SeeSavedSearch',
lib/RT/Interface/Web/MenuBuilder.pm: if ( $current_user->HasRight( Right => 'SeeSavedSearch', Object => RT->System ) ) {
lib/RT/System.pm:__PACKAGE__->AddRight( General => SeeSavedSearch => 'View system saved searches' ); # loc
share/html/Admin/Global/SavedSearches.html: unless $session{CurrentUser}->HasRight( Right => 'SeeSavedSearch', Object => RT->System );
docs/UPGRADING-6.0:SeeSavedSearch/SeeDashboard and AdminSavedSearch/AdminDashboard are to see
docs/UPGRADING-6.0:privileged users C<SeeSavedSearch> so they can see these searches as before.
docs/query_builder.pod:not see this section initially. The global rights "SeeSavedSearch"
I presume these files must be reviewed for this permission:
- lib/RT/Interface/Web/MenuBuilder.pm
- lib/RT/System.pm
- share/html/Admin/Global/SavedSearches.html
This is confirmed. We need to add an upgrade step to migrate the existing historical rights to use the new names. I created a ticket in our public RT to track the issue.