If your RT’s rights setup gets complex this wiki post may help.
http://wiki.bestpractical.com/index.cgi?WhoHasRightsToWhat
-Todd
If your RT’s rights setup gets complex this wiki post may help.
YES!
Thank you for this wonderful contribution.
I made a small correction on the page (colspan), but that is a killer
view of RT rights!
Thanks again,
J.
Jérôme Fenal - jfenal AT gmail.com - http://fenal.org/
Paris.pm - http://paris.mongueurs.net/
If your RT’s rights setup gets complex this wiki post may help.
YES!
Thank you for this wonderful contribution.I made a small correction on the page (colspan), but that is a killer
view of RT rights!Thanks again,
Glad you like it. In our setup the user gets a menu under Preferences
called “My Ticket Rights” that answers a lot of questions about who
can do what.
I plan on extending it so that you can bulk change rights on that
page. 2 minutes ago I opened 10 tabs in firefox to give the same
group permissions on 10 different CFs. In the future it could all
be done with one page.
Also, in our company we don’t care who knows about the existence of
a custom field even if the user hasn’t been given SeeCustomField,
so in this contrib we replace:
my $cfs = RT::CustomFields->new($session{CurrentUser});
with
my $cfs = RT::CustomFields->new($RT::SystemUser);
so that a user knows that CFs exist that the user cannot otherwise see.
-Todd
FYI
With regard to your change; the reason for using @queues instead
of while($cfs->Next) is that we custom sort the queues in a way
that makes more sense for us.
-Todd
If your RT’s rights setup gets complex this wiki post may help.
YES!
Thank you for this wonderful contribution.I made a small correction on the page (colspan), but that is a killer
view of RT rights!Thanks again,
Glad you like it. In our setup the user gets a menu under Preferences
called “My Ticket Rights” that answers a lot of questions about who
can do what.
How??? I have it working if I go directly to the page, but I don’t
know how to make it show up as a link in the menus. I’m still new to
most of this.
I plan on extending it so that you can bulk change rights on that
page. 2 minutes ago I opened 10 tabs in firefox to give the same
group permissions on 10 different CFs. In the future it could all
be done with one page.
That would be great!!!
RT3.4.4 Running on MacOS X 10.4.2 Server
Thanks
If your RT’s rights setup gets complex this wiki post may help.
YES!
Thank you for this wonderful contribution.I made a small correction on the page (colspan), but that is a killer
view of RT rights!Thanks again,
Glad you like it. In our setup the user gets a menu under Preferences
called “My Ticket Rights” that answers a lot of questions about who
can do what.How??? I have it working if I go directly to the page, but I don’t
know how to make it show up as a link in the menus. I’m still new to
most of this.
Well, I had to have Jesse add a callback to RT to get it inserted into
the menus. That callback will be in the next version of RT (3.4.5?)
Then you have to create the callback component. I can go into more
detail if you want.
I plan on extending it so that you can bulk change rights on that
page. 2 minutes ago I opened 10 tabs in firefox to give the same
group permissions on 10 different CFs. In the future it could all
be done with one page.That would be great!!!
Working on it right now…
Thanks Todd, this is a great addition for administrators. Can’t wait to
see the version that allows for bulk editing of permissions.
Joby Walker
ITI SSG, University of Washington
Todd Chapman wrote:
Thanks Todd, this is a great addition for administrators. Can’t wait to
see the version that allows for bulk editing of permissions.
Thanks! It turns out bulk editing is a bitch, but I’m trying to
make sense of it.
For example:
Todd: Does the user have right X for object Y?
RT: Yes!
Todd: Revoke right X on object Y for user.
RT: Sorry, user doesn’t have that right.
Todd: WTF?!
RT: User is a member of a group, that is a member of a group, that has that right.
Todd: My head hurts.
RT: It should.
Thanks Todd, this is a great addition for administrators. Can’t wait to
see the version that allows for bulk editing of permissions.Thanks! It turns out bulk editing is a bitch, but I’m trying to
make sense of it.For example:
Todd: Does the user have right X for object Y?
RT: Yes!
Perhaps it’s worth building a collection of ACL entries…
Thanks Todd, this is a great addition for administrators. Can’t wait to
see the version that allows for bulk editing of permissions.Thanks! It turns out bulk editing is a bitch, but I’m trying to
make sense of it.For example:
Todd: Does the user have right X for object Y?
RT: Yes!Perhaps it’s worth building a collection of ACL entries…
As I lay in bed last night with RT internals swirling in my head, it
occured to me that I might be able to do that instead of changing
HasRight. But the jury is still out. 
Todd: Revoke right X on object Y for user.
RT: Sorry, user doesn’t have that right.Todd: WTF?!
RT: User is a member of a group, that is a member of a group, that has that right.Todd: My head hurts.
RT: It should.
Your head will hurt a lot less if you never give individual users
rights except perhaps for a super user or two. Then all user management
becomes adding/removing them to appropriate groups and all changes to
the group rights affect all appropriate users.
Les Mikesell
les@futuresource.com
Todd: Revoke right X on object Y for user.
RT: Sorry, user doesn’t have that right.Todd: WTF?!
RT: User is a member of a group, that is a member of a group, that has that right.Todd: My head hurts.
RT: It should.Your head will hurt a lot less if you never give individual users
rights except perhaps for a super user or two. Then all user management
becomes adding/removing them to appropriate groups and all changes to
the group rights affect all appropriate users.
I know. I was actually thinking of making it a feature of the
tool that you can’t assign rights to individual users.
-Todd