Mike,

As far as i know, you hit it already. We have 50 Queues. Because we want so many of them to be run independently, we have very few Global rights and grant most of the privileges at the Queue level. Initially, we had a lot of overlap and redundancy so it took alot of work to do it this way but now that it's done, it was worth bitting the bullet.

Kenn
LBNL

Mike Friedman wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I think I know the answer to this, but I want to make sure.

I'm going to have to set up a new queue that will be restricted to a small set of privileged users. But I currently have most rights assigned globally, to a small set of groups, including 'Everyone' and 'Privileged.

Since there doesn't appear to be a way to *subtract* global rights from specific queues, does this mean I have no choice but to replicate all the global rights that I don't want to apply to the new restricted queue into each of the other queues (and then delete the global rights)?

It would be nice not to have to do this, as we have several queues so it can be a tedious process. I'm wondering if there is a technique I can use to avoid this, though I suspect the answer is not what I want to hear.

Thanks.

Mike

_________________________________________________________________________
Mike Friedman                        System and Network Security
[EMAIL PROTECTED]               2484 Shattuck Avenue
1-510-642-1410                       University of California at Berkeley
http://socrates.berkeley.edu/~mikef  http://security.berkeley.edu
_________________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBRLfR8K0bf1iNr4mCEQLd1QCg6U+cTgyT3Zg6jR91smzQ3DTMg0UAmwbC
3VSTGwhxs2O6OWGncPAiGdyo
=qtKQ
-----END PGP SIGNATURE-----
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. Buy a copy at http://rtbook.bestpractical.com


We're hiring! Come hack Perl for Best Practical: http://bestpractical.com/about/jobs.html


_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. Buy a copy at http://rtbook.bestpractical.com


We're hiring! Come hack Perl for Best Practical: 
http://bestpractical.com/about/jobs.html

Reply via email to