Mathew,

        You mentioned needing "SeeQueue" for "Unprivileged" users and you 
already have it for "Privileged" users. Why not grant "CreateTicket", 
"SeeQueue" Globally for "Everyone" (saves redundant granting) and 
"ShowTicket" Globally for "Requestors"? That way any requestor can 
always "See" their ticket and everyone can "Create" one in the Queue of 
their choice. Then Grant "ReplyToTicket" on a Queue level to the groups 
that support each particular Queue.
        I'm of the opinion that there is so much redundant "Granting" of 
privileges out there without realizing that it makes it difficult to 
know why queries are taking so long. Yet, these redundant privileges are 
slowing down the system cause so many users have rights they weren't 
meant to have. Just a thought.

Kenn
LBNL

On 3/17/2008 4:37 AM, Mathew wrote:
> We have
> 
> Everyone: CreateTicket on two public facing queues
> 
> Privileged: CommentOnTicket, CreateTicket, SeeQueue, ShowOutgoingEmail, 
> ShowTicket, ShowTicketComments, Watch on all queues
> 
> Unprivileged: CreateTicket, SeeQueue on one public facing queue (now 
> that I think about it CreateTicket here seems redundant); ReplyToTicket, 
> Watch on all queues.
> 
> Individual groups: AssignCustomFields, ModifyTicket, OwnTicket, 
> ReplyToTicket, StealTicket, TakeTicket on only their corresponding queues.
> 
> Our unprivileged users need SeeQueue because we have a customer portal 
> which requires it (we don't use the self-service interface).
> 
> Mathew
> 
> Ham MI-ID, Torsten Brumm wrote:
>> Hi Matthew,
>>
>> We have:
>>
>> Everyone: CreateTicket
>> Privileged: CreateSavedSearch, EditSavedSearches, LoadSavedSearch, 
>> ShowSavedSearches
>>
>> Roles:
>>
>> Requestor: ReplyToTicket, ShowTicket
>>
>> The rest is done on a queue base.
>>
>> OK, if i have now 1 Queue and grant to this queue 1 Group the right to 
>> OwnTicket, then the dropdown must have the member of this group (from my 
>> logical understanding) and definitve NO UNPRIVILEGED USERS i think!
>>
>> Btw. We rolled back...
>>
>> Torsten
>>
>>
>> Kühne + Nagel (AG & Co.) KG, Geschäftsleitung: Hans-Georg Brinkmann (Vors.), 
>> Uwe Bielang (Stellv.), Bruno Mang, Alfred Manke, Thorsten Meincke, Mark 
>> Reinhardt (Stellv.), Jens Wollesen, Rainer Wunn, Sitz: Bremen, 
>> Registergericht: Bremen, HRA 21928, USt-IdNr.: DE 812773878, Persönlich 
>> haftende Gesellschaft: Kühne & Nagel A.G., Sitz: Contern/Luxemburg 
>> Geschäftsführender Verwaltungsrat: Klaus-Michael Kühne
>>
>>
> 

_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com

Reply via email to