ManualRights: Difference between revisions

From Request Tracker Wiki
Jump to navigation Jump to search
(Adding categories)
 
No edit summary
 
(11 intermediate revisions by 5 users not shown)
Line 1: Line 1:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]


Appendix 2 Rights
[[File:Global-Group-Rights.png|Global group rights|thumb|500px]]


----
'''Appendix 2 Rights'''
 
This is a reference for rights in RT.
 
There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.
 
Below is a list of all the areas in RT to update group and user rights. From the Admin menu:


Note: Table format currently broken for some reason. A copy of this article with a patched (but NOT truly 'fixed') table can be found at [[DanielJohnson]]. Remove this link when this article is rendering correctly with all of its links.


----
* Custom Fields
:* Custom Fields > Select > [select custom field] > Group Rights
:* Custom Fields > Select > [select custom field] > User Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights


This is a reference for rights in RT. The rights are broken down into three tables: global, queue, and group. Within those tables, rights are listed alphabetically. Each right has full description on wiki.
[[File:Queue-Group-Rights.png|Queue level rights by group|thumb|500px]]


See also [[Rights]] article.
* Groups
:* Groups > Select > [select group] > Group Rights
:* Groups > Select > [select group] > User Rights
:* Global > Group Rights


Table 1: Global rights
* Queues
:* Queue > Select > [select queue] > Group Rights
:* Queue > Select > [select queue] > User Rights


<nowiki>| name of right          | what users with this right can do |
* Users (not suggested)
| AdminAllPersonalGroups  | change name, description, and members of any personal group |
:* Global > User Rights
| AdminCustomFields      | add, delete, and modify custom fields |
| AdminGroup              | create groups; change groups' name, description, and rights |
| AdminGroupMembership    | add and remove members from a group |
| AdminOwnPersonalGroups  | change name, description, and members of their own personal groups |
| AdminQueue              | create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date |
| AdminUsers              | create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers,  comments about the user, signature, password, organization and rights.|
| AssignCustomFields      | ??? |
| CommentOnTicket        | add comments to tickets |
| CreateSavedSearch      | ??? |
| CreateTicket            | create tickets |
| DelegateRights          | assign their own rights to other users |
| DeleteTicket            | delete tickets |
| EditSavedSearches      | ??? |
| LoadSavedSearch        | ??? |
| ModifyACL              | change users' and groups' rights. Users with this right should also have the right ShowACL. |
| ModifyCustomField      | ??? |
| ModifyOwnMembership    | add or remove themselves from a group |
| ModifyQueueWatchers    | add and remove [CC]s and [AdminCC]s |
| ModifyScrips            | add, delete, and change the content of scrips |
| ModifySelf              | modify his own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature. |
| ModifyTemplate          | create, modify, and delete scrip templates |
| ModifyTicket            | change tickets' subject, status, time worked, time left, priorities, queue,  dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets |
| OwnTicket              | own (be responsible for) a ticket |
| ReplyToTicket          | add replies to a ticket |
| SeeQueue                | know that a queue exists; queues will appear in visible listings for this user |
| ShowACL                | see the rights granted to users and groups |
| ShowConfigTab          | have access to the Configuration (Admin) tab |
| ShowOutgoingEmail      | see full text of emails sent by RT |
| ShowSavedSearches      | list or load [SavedSearch]es |
| ShowScrips              | see scrips |
| ShowTemplate            | see a scrip's email template |
| ShowTicket              | see tickets |
| ShowTicketComments      | see comments attached to tickets |
| SuperUser              | everything; this user has all possible rights within RT |
| Watch                  | sign up as a requestor or Cc |
| WatchAsAdminCc          | sign up as an AdminCC |
</nowiki>


Table 2: Queue rights


<nowiki>|*name of right*          |*what users with this right can do*|
See also [[Rights]] article.
|AdminCustomFields        |add, delete, and modify custom fields|
|AdminQueue              |create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date |
|CommentOnTicket          |add comments to tickets|
|CreateTicket            |create tickets|
|DeleteTicket            |delete tickets|
|ModifyACL                |change users' and groups' rights. Users with this right should also have the right Show ACL.|
|ModifyQueueWatchers      |add and remove Ccs and AdminCcs |
|ModifyScrips            |add, delete, and change the content of scrips|
|ModifyTemplate          |create, modify, and delete scrip templates|
|ModifyTicket            |change tickets' subject, status, time worked, time left, priorities, queue,  dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets |
|OwnTicket                |own (be responsible for) a ticket |
|ReplyToTicket            |add replies to a ticket|
|SeeQueue                |know that a queue exists; queues will appear in visible listings for this user |
|ShowACL                  |see the rights granted to users and groups |
|ShowScrips              |see scrips|
|ShowTemplate            |see a scrip's email template|
|ShowTicket              |see tickets|
|ShowTicketComments      |see comments attached to tickets|
|[Watch]                 |sign up as a requestor or Cc|
|WatchAsAdminCc          |sign up as an AdminCC|
</nowiki>


Table 3: Group rights
If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an [https://metacpan.org/pod/RT::Extension::RightsInspector extension] for RT 4.4 and it is a core feature starting in RT 5.0.


<nowiki>| *name of right*        | *what users with this right can do* |
| AdminGroup              | create groups; change groups' name, description, and rights |
| AdminGroupMembership    | add and remove members from a group |
| ModifyACL              | change users' and groups' rights. Users with this right should also have the right Show ACL. |
| ModifyOwnMembership    | add or remove themselves from a group |
</nowiki>


----
----
Line 96: Line 42:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
[[Category:RT User Manual]]
[[Category:RT User Manual]]
[[Category:RT44]]

Latest revision as of 13:29, 18 February 2021

Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Global group rights

Appendix 2 Rights

This is a reference for rights in RT.

There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.

Below is a list of all the areas in RT to update group and user rights. From the Admin menu:


  • Custom Fields
  • Custom Fields > Select > [select custom field] > Group Rights
  • Custom Fields > Select > [select custom field] > User Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights
Queue level rights by group
  • Groups
  • Groups > Select > [select group] > Group Rights
  • Groups > Select > [select group] > User Rights
  • Global > Group Rights
  • Queues
  • Queue > Select > [select queue] > Group Rights
  • Queue > Select > [select queue] > User Rights
  • Users (not suggested)
  • Global > User Rights


See also Rights article.

If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an extension for RT 4.4 and it is a core feature starting in RT 5.0.


Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Retrieved from "https://rt-wiki.bestpractical.com/index.php?title=ManualRights&oldid=26998"