I just thought that I would add to this that this only happens (as far
as I can tell) with the owner field in Build.html.
Other areas with an owner drop down (such as adjusting the information
for a ticket) only display the users who have OwnTicket rights on that
queue.
Still... since no unprivileged users have OwnTicket rights... this
shouldn't be a problem. :-/
-- Chris
Chris Poupart wrote:
OK,
I just realized that they had "CreateTicket" and "Watch" because of
Global group settings.
So I removed all of those permissions as well. Now when I look at the
Rights Matrix for an unprivileged user, they have absolutely no rights.
However, the problem still persists. :(
I appreciate your help. Looking through my permissions, it seems that
it was time for a cleanup anyway!
-- Chris
Drew Barnes wrote:
My last suggestion would be to try removing "watch" rights to
unprivileged.
My rights setup (in case this may help you):
Privileged: Steal Ticket, TakeTicket
Unpriv'ed: CreateTicket, SeeQueue
Everyone: CreateTicket (probably redundant), ReplyToTicket
Requestor: ReplyToTicket
MyGroup: ModifyTicket, OwnTicket, ShowTicket, ShowTicketComments, Watch,
WatchAsAdminCC
MyGroup is the only group that appears in the Owner box on my 3.6.4
(upgraded from 3.2.2) system.
Hope this helps you some.
Chris Poupart wrote:
Unfortunately, this hasn't brought me any closer to resolving the bug.
If I take a random auto-generated user, they do not have "OwnTicket"
rights on any of the queues. :(
So I then went through and removed all of the permissions to the
system defined groups (Everyone, Privileged, Unprivileged, Owner,
AdminCC, CC, etc) for all of the queues.
Now if I look at an unprivileged auto-created user in the Rights
Matrix, they have "Create Ticket" rights to all of the queues, and
"Watch" rights to all of the queues. That's it.
However, I still have the problem that /all/ of the users load when I
bring up the Build.html page. :-/
If anyone has any other advice on this one, I would love to hear it.
-- Chris
Chris Poupart wrote:
Thanks Drew,
I have RTx:RightsMatrix installed, and I am looking through. So far
there is nothing obvious, unless I am missing something.
I don't have an over-abundance of queues, so I may just go through
them and double-check the permissions for groups that would apply to
everyone (really only the default global groups).
-- chris
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at http://rtbook.bestpractical.com
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at http://rtbook.bestpractical.com
