[prev in list] [next in list] [prev in thread] [next in thread] 

List:       rt-users
Subject:    Re: [rt-users] Error with ACL?
From:       Kenneth Crocker <KFCrocker () lbl ! gov>
Date:       2007-11-30 20:41:04
Message-ID: 47507560.4060105 () lbl ! gov
[Download RAW message or body]

Thank you. That's what I was referring to.

Kenn
LBNL

On 11/30/2007 12:17 PM, Todd Chapman wrote:
> I doubt your patch would be accepted by Jesse. Chances are this isn't
> a result of some mistake. I'm willing to be that in his view Comment
> and Reply both modify the ticket so the ability to do those things is
> implied by the ModifyTicket right. I would recommend doing an _Local
> overlay to accomplish what you want.
> 
> Come to think of it, when a ticket is replied to there are other
> fields in the ticket that are updated. Certain timestamp fields and
> also TimeWorked I think. Those would all fail if you could reply to
> the ticket but not modify it.
> 
> -Todd
> 
> On 11/30/07, Max Clark <max.clark@gmail.com> wrote:
>> :) Fantastic! So I guess this means that I get to learn alot about the
>> internals of RT as I prepare a large patch.
>>
>> On Nov 30, 2007 11:50 AM, Kenneth Crocker <KFCrocker@lbl.gov> wrote:
>>> Max,
>>>
>>>
>>>         Well, good news for you, ModifyTicket also inherits CommentOnTicket and
>>> I think even DeleteTicket.
>>>
>>>
>>> Kenn
>>> LBNL
>>>
>>>
>>> On 11/30/2007 11:14 AM, Max Clark wrote:
>>>>> Why would it be considered a bug? Wouldn't the person making changes be
>>>>> a person of interest? Wouldn't any person of interest want to know what
>>>>> is going on about a ticket?
>>>> What has that have to do with the rights to ReplyToTicket? I am not
>>>> talking about Watcher, AdminCC, or CC privileges here. I am talking
>>>> about the right for a user to reply to a ticket and send
>>>> correspondence. To me ModifyTicket != ReplyToTicket just like it
>>>> shouldn't mean CommentOnTicket or DeleteTicket and that's why I
>>>> perceive this as a bug.
>>>>
>>>> My permissions requirements for this Queue are straightforward. I need
>>>> to assign rights for a group to view, modify (reassign, move,
>>>> associate, close), and comment on a ticket. This should be
>>>> accomplished by setting CommentOnTicket, ModifyTicket, OwnTicket,
>>>> SeeQueue, ShowTicket, ShowTicketComments, StealTicket, TakeTicket,
>>>> Watch, and WatchAsAdminCc. What was discovered is that ModifyTicket
>>>> inherits ReplyToTicket rights which should not happen.
>>>>
>>>> -Max
>>>>
>>>
> 

_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

SAVE THOUSANDS OF DOLLARS ON RT SUPPORT:

If you sign up for a new RT support contract before December 31, we'll take
up to 20 percent off the price. This sale won't last long, so get in touch today. 
    Email us at sales@bestpractical.com or call us at +1 617 812 0745.


Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com
[prev in list] [next in list] [prev in thread] [next in thread]