Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-17 Thread Jon Baker
Thanks for the reply, Kenn - I want the users to be able to be assigned the ticket by the admin, but I don't want them to be able to change any ticket assignments themselves. So Joe is in the Users group, and Sam is in the Admin group. Sam needs to be able to assign ownership of a ticket to

Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-17 Thread Kevin Falcone
On Thu, Feb 17, 2011 at 08:06:03AM -0600, Jon Baker wrote: Thanks for the reply, Kenn - I want the users to be able to be assigned the ticket by the admin, but I don't want them to be able to change any ticket assignments themselves. So Joe is in the Users group, and Sam is in the Admin

Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-17 Thread Kenneth Crocker
Jon, Well, here's a thought. 1) For each Queue you want this type of situation, either make the assigner the AdminCc, or create a group for just those users allowed to assign tickets. 2) Then create scrip for that Queue that is conditioned by ChangeOwner and in the action section, check to see

Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-17 Thread Jon Baker
I was able to sort of hack it into resetting the ownership if someone outside of the group attempts to change it. I created a scrip on Owner Change with the following custom action: my $GroupObj = RT::Group-new( $RT::SystemUser ); $GroupObj-LoadUserDefinedGroup( 'IT Admin' ); my $PrincipalObj

Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-17 Thread Jon Baker
That's what I ended up doing and it looks like it's working great. Here's the scrip action that I ended up using in case anyone else is looking for the solution: my $GroupObj = RT::Group-new( $RT::SystemUser ); $GroupObj-LoadUserDefinedGroup( 'IT Admin' ); my $PrincipalObj = RT::Principal-new(

Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-17 Thread Raed El-Hames
...@lists.bestpractical.com] On Behalf Of Jon Baker Sent: 17 February 2011 18:19 To: rt-users@lists.bestpractical.com Subject: Re: [rt-users] ModifyTicket/Steal/Take privileges That's what I ended up doing and it looks like it's working great. Here's the scrip action that I ended up using

Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-17 Thread Jon Baker
I'm a little hesitant to change the source code just because I know I'll forget I did it when I install the next update - also, this is only affecting one queue. I'm also not too concerned as it is the IT Staff group that is being assigned the tickets, and they are told not to change the

[rt-users] ModifyTicket/Steal/Take privileges

2011-02-16 Thread Jon Baker
I am trying to set up a group in a queue that has the ability to change the status but not the owner; i.e. can't steal/take it (a different group is assigning tickets to them and they're not allowed to get out of it) but they need to be able to resolve their own tickets. It seems to me that

Re: [rt-users] ModifyTicket/Steal/Take privileges

2011-02-16 Thread Kenneth Crocker
Jon, Remove the right to OwnTicket as well as Steal and Take. You can grant the ModifyTicket to that group as well as ShowTicket and that way they can See tickets in a Queue, Modify them, but not Own them. Kenn LBNL On Wed, Feb 16, 2011 at 3:24 PM, Jon Baker jba...@wgm.us wrote: I am trying