Unprivileged users are able to apporove their own tickets

Hi ,

We noticed that unprivileged users are approving their own tickets in RT system. [ New -> approved]

we removed [Reply to Tickets} access from group rights for unprivileged users and it is not working as expected. Anybody has any suggestions or pointers to resolve this issue? thanks!

Do they have something like ModifyTicket rights as the requestor of the ticket?

You might want to check (as an admin) Admin -> Global -> Group Rights, select Unprivileged and make sure they don’t have the “Show Approvals Tab” right check in the “Rights for Administrators” section. Unprivileged users will also inherit rights from other pseudo-groups they might be in such as Requestor or CC.

If this is a custom lifecycle that you’re working on you might also want to check the rights associated with status transitions.

Thanks for your quick reply. I verified that Unprivileged does not have “show approbals Tab” right check in “Rights for Administrators” section also he is not part of pseudo-groups they might be in such as Requestor or CC.

Here are the current transitions we are using in RT_SiteConfig.pm

transitions => {
“” => [qw(new open resolved)],

        # from   => [ to list ],
        new      => [qw(    open approved delayed resolved rejected deleted)],
        open     => [qw(new      approved delayed resolved rejected deleted)],
        approved => [qw(new open          delayed resolved rejected deleted)],
        delayed  => [qw(new open approved         rejected resolved deleted)],
        resolved => [qw(new open approved delayed          rejected deleted)],
        rejected => [qw(new open approved delayed resolved          deleted)],
        deleted  => [qw(new open approved delayed rejected resolved        )],