Jeff, Sounds good to me.
Kenn On Wed, Jul 21, 2010 at 11:04 AM, James Berwick <[email protected]>wrote: > On 7/21/2010 1:46 PM, Kenneth Crocker wrote: > >> Jeff, >> >> Not if I'm not supposed to. So what if there aren't 10 unowned tickets in >> the list? As a matter of security, I sure wouldn't want someone looking at >> sensitive payroll info on requests in the Payroll Queue if they aren't even >> allowed to have access to the payroll Queue. >> >> Kenn >> LBNL >> > If I understand correctly: > There are 100 open tickets. The 10 newest unowned tickets belong to a > queue that a user can't see. The user logs in and the 10 newest unowned > tickets box is empty. There are 90 other tickets that are new and unowned > that the user should be allowed to see but are not displayed. > > What I believe Mark and Jeff are saying (and that UseSQLForACLChecks does) > is have the box be filled with the 10 newest unowned tickets that a user is > allowed to see, ie, filter the tickets during the search as opposed to > finding the top 10 and then filtering out what shouldn't be visible. > > > Discover RT's hidden secrets with RT Essentials from O'Reilly Media. > Buy a copy at http://rtbook.bestpractical.com >
Discover RT's hidden secrets with RT Essentials from O'Reilly Media. Buy a copy at http://rtbook.bestpractical.com
