Hi, > You might be able to swap out ModifyTicket and use some > finer-grained rights in its place, depending on what modifications > end users actually need to make.
what are the equivalent (separate) rights for ModifyTicket? regards Danny From: rt-users [mailto:[email protected]] On Behalf Of Alex Peters Sent: Friday, February 13, 2015 1:11 AM To: Cena, Stephen (ext. 300) Cc: [email protected] Subject: Re: [rt-users] Prevent users from making Comments on tickets I believe that a user will unconditionally have commenting ability if they also have the ModifyTicket right, regardless of the state of their CommentOnTicket right. You might be able to swap out ModifyTicket and use some finer-grained rights in its place, depending on what modifications end users actually need to make. On 13 February 2015 at 04:06, Cena, Stephen (ext. 300) <[email protected]<mailto:[email protected]>> wrote: I'm in the process of locking down end-user permissions in our RT install. We want it set up so that users can only do Reply, and Admins can use Comment and Reply. At present, my "end user" can't see a Comment in a ticket, or an attachment made with a Comment. However, if the user emails the Comment address or uses the Comment in the Action drop-down in the ticket the entry gets made. The proper visibility of the resulting Comment is correct. AFAIK, there are no global permissions for anything (I'm doing it al at the queue level for each queue).
smime.p7s
Description: S/MIME cryptographic signature
