Re: [rt-users] Option to Emulate another RT user from SuperUser

[k...@rice.edu]

On Thu, Nov 12, 2015 at 01:23:53PM -0500, Joe Kirby wrote:
> At time some folks on campus report that RT is slow for them. 
> 
> I try to create a test user with the same access but this does not always 
> help me because they may have a lot of tickets or a dashboard item/report 
> that I cannot emulate.
> 
> Does RT have any built-in mechanism for SuperUser to do such a thing.
> 
> We use single sign on and thus I am unable to override that.
> 
> Thanks
> 
> Joe
> 
> Joe Kirby ,  Assistant Vice President, Business Systems
> Division of Information Technology (DoIT) 
> Support Response -   http://www.umbc.edu/doit 
> Administration 627
> Office - 410-455-3020 
> Email - ki...@umbc.edu
> 

Hi Joe,

You might be able to set up an alternate frontend configured to use
local authentication. Then you could test with that by setting a local
password for the account. What version are you running and are you do
you have Set($UseSQLForACLChecks, 1) in your RT_SiteConfig.pm? Superuser
skips all of the access checks that regular accounts pass through.

Regards,
Ken

Re: [rt-users] Owner Query - Custom

[Matt Zagrabelny]

On Wed, Nov 11, 2015 at 10:21 AM, Marcelo Calado | TBS TAX Services
 wrote:
> Hi,
>
> I want to change (if possible) settings, under Permissions , modify the 
> permissions that are allowed or denied for only the RT User's   to be Owner's 
> when I create a new ticket or modify?
>
> The Watcher's can't be Owner!
>
> Is it possible?

You can hack on:

share/html/Helpers/Autocomplete/Owners

I see there is only one callback in there. You could add another
callback to the mason component and then have your code utilize that
callback. BPS is usually pretty accepting to new callbacks - send a
patch their way to (hopefully) get it included in upstream.

-m

[rt-users] Option to Emulate another RT user from SuperUser

[Joe Kirby]

At time some folks on campus report that RT is slow for them. 

I try to create a test user with the same access but this does not always help 
me because they may have a lot of tickets or a dashboard item/report that I 
cannot emulate.

Does RT have any built-in mechanism for SuperUser to do such a thing.

We use single sign on and thus I am unable to override that.

Thanks

Joe

Joe Kirby ,  Assistant Vice President, Business Systems
Division of Information Technology (DoIT) 
Support Response -   http://www.umbc.edu/doit 
Administration 627
Office - 410-455-3020 
Email - ki...@umbc.edu

Re: [rt-users] Option to Emulate another RT user from SuperUser

[Matt Zagrabelny]

On Thu, Nov 12, 2015 at 12:23 PM, Joe Kirby  wrote:
> At time some folks on campus report that RT is slow for them.
>
> I try to create a test user with the same access but this does not always
> help me because they may have a lot of tickets or a dashboard item/report
> that I cannot emulate.

I wouldn't try to recreate the user that is experiencing slowness. I
would try to work with that person.

> Does RT have any built-in mechanism for SuperUser to do such a thing.

I would start off by enabling query execute time logging. Search the
internet for "slow query logging" and your database and you'll get the
instructions for enabling the logging.

> We use single sign on and thus I am unable to override that.

We use SSO and if you wanted to side step that, there are mechanisms.

-m

Re: [rt-users] Option to Emulate another RT user from SuperUser

[Joe Kirby]

We recently turned of Set($UseSQLForACLChecks, 1) for performance reasons.

Are you saying we could have a special config in place that would allow me to 
access our system in non-SSO mode or would I have to cloned the db to such an 
area?

Thanks for getting back so quickly

Joe

Joe Kirby ,  Assistant Vice President, Business Systems
Division of Information Technology (DoIT) 
Support Response -   http://www.umbc.edu/doit 
Administration 627
Office - 410-455-3020 
Email - ki...@umbc.edu

> On Nov 12, 2015, at 1:37 PM, k...@rice.edu wrote:
> 
> On Thu, Nov 12, 2015 at 01:23:53PM -0500, Joe Kirby wrote:
>> At time some folks on campus report that RT is slow for them. 
>> 
>> I try to create a test user with the same access but this does not always 
>> help me because they may have a lot of tickets or a dashboard item/report 
>> that I cannot emulate.
>> 
>> Does RT have any built-in mechanism for SuperUser to do such a thing.
>> 
>> We use single sign on and thus I am unable to override that.
>> 
>> Thanks
>> 
>> Joe
>> 
>> Joe Kirby ,  Assistant Vice President, Business Systems
>> Division of Information Technology (DoIT) 
>> Support Response -   http://www.umbc.edu/doit 
>> Administration 627
>> Office - 410-455-3020 
>> Email - ki...@umbc.edu
>> 
> 
> Hi Joe,
> 
> You might be able to set up an alternate frontend configured to use
> local authentication. Then you could test with that by setting a local
> password for the account. What version are you running and are you do
> you have Set($UseSQLForACLChecks, 1) in your RT_SiteConfig.pm? Superuser
> skips all of the access checks that regular accounts pass through.
> 
> Regards,
> Ken

Re: [rt-users] Option to Emulate another RT user from SuperUser

[Matt Zagrabelny]

On Thu, Nov 12, 2015 at 12:40 PM, Joe Kirby  wrote:
> We recently turned of Set($UseSQLForACLChecks, 1) for performance reasons.

Sorry. Haven't used that setting yet.

> Are you saying we could have a special config in place that would allow me
> to access our system in non-SSO mode or would I have to cloned the db to
> such an area?

We bypass it via the browser user agent. Here is a snippet from our
apache configs:

SetEnvIf User-Agent ^KnockKnock let_me_in

# Allow either Shib-ed users or KnockKnock agents to be able to access the
# system. KnockKnock agents will still have to authenticate to the local
# RT login page.


AuthType shibboleth
ShibRequireSession on
Require valid-user

Require env let_me_in


Options +ExecCGI
AddHandler fastcgi-script fcgi


Then to access RT's login page, change your browser's user agent to
"KnockKnock" or whatever string you choose.

-m