SelfService interface in RT

RT Developers
1

Hello everyone,

I'm using RT  4.2.  I want unprivileged users to only access their own

tickets but when I log in as unprivileged user in The SelfService interface I
can access to other tickets using the research box or by modifying the
ID in the URL,
Does anyone know how I can stop that.

Thanks in advance,
2 
 I'm using RT  4.2.  I want unprivileged users to only access their

own tickets but when I log in as unprivileged user in The SelfService
interface I can access to other tickets using the research box or
by modifying the ID in the URL,

Does anyone know how I can stop that.

Hello,

This sounds like you have ShowTicket (and perhaps similar rights)
granted to The Unprivileged group. If you grant this right at this
level, unprivileged users can see all tickets.

You probably want to grant it to the Requestor role. In this manner
unprivileged users can only see the tickets they create.

Regards,