Should creating a group give the creator AdminGroupMembership?

RT Developers
1

I want to give an RT user the ability to create new
RT groups. So I can give that user AdminGroup
globally. But once the group is created the user
can’t add members to the group. I don’t want to
give the user AdminGroupMemberships globally because
they could add themselves to another, more powerful
group.

Should I submit a patch for RT so that when a user
creates a UserDefined group they are granted
SeeGroup and AdminGroupMemberships on the new
group?

-Todd

2

At Friday 1/20/2006 04:43 PM, Todd Chapman wrote:

I want to give an RT user the ability to create new
RT groups. So I can give that user AdminGroup
globally. But once the group is created the user
can’t add members to the group. I don’t want to
give the user AdminGroupMemberships globally because
they could add themselves to another, more powerful
group.

Should I submit a patch for RT so that when a user
creates a UserDefined group they are granted
SeeGroup and AdminGroupMemberships on the new
group?

-Todd

One thing we like about RT is that we can grant all our privileges to
groups - we don’t grant privileges to individual users. This mod would
break this approach - so I’d argue against including it in core RT.

Steve

3

I argree about the groups. When I implement this locally
the user will actually have AdminGroup based on
membership in a group with that right. What I plan
to do is figure out how the user got the right and then
give that group the AdminGroupMembers right.

-ToddOn Fri, Jan 20, 2006 at 05:02:42PM -0500, Stephen Turner wrote:

At Friday 1/20/2006 04:43 PM, Todd Chapman wrote:

I want to give an RT user the ability to create new
RT groups. So I can give that user AdminGroup
globally. But once the group is created the user
can’t add members to the group. I don’t want to
give the user AdminGroupMemberships globally because
they could add themselves to another, more powerful
group.

Should I submit a patch for RT so that when a user
creates a UserDefined group they are granted
SeeGroup and AdminGroupMemberships on the new
group?

-Todd

One thing we like about RT is that we can grant all our privileges to
groups - we don’t grant privileges to individual users. This mod would
break this approach - so I’d argue against including it in core RT.

Steve