Admin: 2 revisions imported

2016-04-06T20:39:42Z

2 revisions imported

New page

=== This has been replaced by the much more extensive RTx::RightsMatrix, which can be downloaded from CPAN. ===

If you have many queues or custom fields it can quickly become confusing as to who has rights to what. This is the first version of a Mason component that will help you make sense of it all. Please report bugs to todd [[at]] chaka.net.

Drop this in [=html/Admin/Global/[[ViewTicketRights]].html]

<nowiki>% my $Title = loc("Ticket Rights for [_1]: [_2]", $principal->IsUser ? loc('User') : loc('Group'), $principal->Object->Name ? $principal->Object->Name : $principal->Object->Type);
<& /Elements/Header, Title=>$Title &>
<& /User/Elements/Tabs,
current_tab => 'Admin/Global/ViewTicketRights.html',
Title=>$Title &>
<table border="1" cellspacing="0">
<tr>
<th colspan="2" >Custom Field</th>
<th colspan="<% scalar @queues %>" >Ticket Queue</th>
</tr>
<tr>
<td>Name</td>
<td>Description</td>
% foreach my $queue ( @queues ) {
<td><b><% $queue->Name %></b>
<br>(
<% $principal->HasRight(Object => $queue, Right => 'ShowTicket') ? 'r' : '' %>
<% $principal->HasRight(Object => $queue, Right => 'ModifyTicket') ? 'w' : '' %>
<% $principal->HasRight(Object => $queue, Right => 'CreateTicket') ? 'c' : '' %>
<% $principal->HasRight(Object => $queue, Right => 'DeleteTicket') ? 'd' : '' %> )</td>
% }
</tr>

% my $i;
% while (my $cf = $cfs->Next) {
% $i++;
<tr class="<% $i%2 ? 'oddline' : 'evenline'%>" >
<td><b><% $cf->Name %></b></td> <td><% $cf->Description %></td>
% foreach my $queue ( @queues ) {
% my $ocfs = RT::ObjectCustomFields->new($RT::SystemUser);
% $ocfs->Limit( FIELD => 'CustomField', VALUE => $cf->Id );
% $ocfs->Limit( FIELD => 'ObjectId', VALUE => 0 );
% $ocfs->Limit( FIELD => 'ObjectId', VALUE => $queue->Id );
% if ($ocfs->Count) {
<td align="center">
<b>
<% $principal->HasRight(Object => $cf, Right => 'SeeCustomField') ? 'r' : '' %>
<% $principal->HasRight(Object => $cf, Right => 'ModifyCustomField') ? 'w' : '' %>
<% $principal->HasRight(Object => $cf, Right => 'AdminCustomField') ? 'a' : '' %>
</b>
</td>
% }
% else {
<td align="center">-</td>
% }
% }
</tr>
% }
</table>

<h3>Key:</h3>
For an queue the possible permissions are:
<table border="1">
<tr>
<td>r</td><td>ShowTicket</td><td>Can see tickets of that queue</td>
</tr>
<tr>
<td>w</td><td>ModifyTicket</td><td>Can edit/modify tickets of that queue</td>
</tr>
<tr>
<td>c</td><td>CreateTicket</td><td>Can create tickets of that queue</td>
</tr>
<tr>
<td>d</td><td>DeleteTicket</td><td>Can delete tickets of that queue</td>
</tr>
</table>
<p>

For a custom field the possible permissions are:
<table border="1">
<tr>
<td>r</td><td>SeeCustomField</td><td>Can see that custom field for that queue</td>
</tr>
<tr>
<td>w</td><td>ModifyCustomField</td><td>Can edit/moidfy that custom field for that queue</td>
</tr>
<tr>
<td>a</td><td>AdminCustomField</td><td>Can administer that custom field for that queue</td>
</tr>
</table>
<p>

A dash(-) in the table means that custom field does not apply to that queue.<br>
An empty cell in the table means that you have no permissions for that custom field and queue combination.

<FORM METHOD=POST ACTION="ViewTicketRights.html" ENCTYPE="multipart/form-data">
<INPUT TYPE=HIDDEN NAME=id VALUE="">

<& /Elements/TitleBoxStart, title => loc('View rights for'), color=> "#993333", width => "100%" &>
Select User or Group:
<SELECT NAME="Principal">
<OPTION VALUE="">-
<OPTION VALUE="<%$session{CurrentUser}->id%>"><%$session{CurrentUser}->Name%>
<OPTION VALUE="3">Everyone
<OPTION VALUE="4">Privileged Users
<OPTION VALUE="5">Unprivileged Users
%while (my $group = $groups->Next) {
%next unless $session{CurrentUser}->HasRight(Right => 'AdminGroup', Object => $group) or $group->HasMember($session{CurrentUser}->PrincipalObj);
<OPTION VALUE="<%$group->id%>"><%$group->Name%>
%}
</SELECT>
%if ($session{CurrentUser}->HasRight(Right => 'AdminUsers', Object => $RT::System)) {
- or -
Enter username: <INPUT NAME="User">
%}
<& /Elements/TitleBoxEnd &>

<& /Elements/Submit&>
</form>

<%INIT>
my $VERSION = 0.91;

my $principal;
if ($ARGS{Principal}) {
$principal = RT::Principal->new($session{CurrentUser});
my ($rv, $msg) = $principal->Load($ARGS{Principal});
if (! $rv) {
$m->comp("/Elements/Error", Why => loc("Principal not found"));
$m->abort;
}
}
elsif ($ARGS{User}) {
my $user = RT::User->new($session{CurrentUser});
my ($rv, $msg) = $user->Load($ARGS{User});
if (! $rv) {
$m->comp("/Elements/Error", Why => loc("User [_1] not found", $ARGS{User}));
$m->abort;
}
$principal = $user->PrincipalObj;
}
else {
$principal = $session{CurrentUser}->PrincipalObj;
}

my $cfs = RT::CustomFields->new($session{CurrentUser});
$cfs->LimitToLookupType('RT::Queue-RT::Ticket');
$cfs->OrderBy(FIELD => 'Name');

my $queues = RT::Queues->new($session{CurrentUser});
$queues->UnLimit;
my @queues;
while (my $queue = $queues->Next) { push @queues, $queue; }

my $groups = new RT::Groups($session{'CurrentUser'});
$groups->Limit(FIELD => 'Domain', VALUE => 'UserDefined');

</%INIT>
<%ARGS>
$User => undef
</%ARGS>
</nowiki>

WhoHasRightsToWhat - Revision history

Admin: 2 revisions imported