ManualRights: Difference between revisions

From Request Tracker Wiki
Jump to navigation Jump to search
(RTFM)
No edit summary
 
(10 intermediate revisions by 5 users not shown)
Line 1: Line 1:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]


Appendix 2 Rights
[[File:Global-Group-Rights.png|Global group rights|thumb|500px]]


----
'''Appendix 2 Rights'''
 
This is a reference for rights in RT.
 
There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.
 
Below is a list of all the areas in RT to update group and user rights. From the Admin menu:
 
 
* Custom Fields
:* Custom Fields > Select > [select custom field] > Group Rights
:* Custom Fields > Select > [select custom field] > User Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights
 
[[File:Queue-Group-Rights.png|Queue level rights by group|thumb|500px]]
 
* Groups
:* Groups > Select > [select group] > Group Rights
:* Groups > Select > [select group] > User Rights
:* Global > Group Rights


This is a reference for rights in RT. The rights are broken down into three tables: global, queue, and group. Within those tables, rights are listed alphabetically. Each right has full description on wiki.
* Queues
:* Queue > Select > [select queue] > Group Rights
:* Queue > Select > [select queue] > User Rights


See also [[Rights]] article.
* Users (not suggested)
:* Global > User Rights


Table 1: Global rights
{| class="wikitable" cellpadding="3" width="100%"
|+
!Name of right
!What users with this right can do
|+
|[[AdminAllPersonalGroups]]
|change name, description, and members of any personal group
|+
|[[AdminCustomFields]]
| add, delete, and modify custom fields
|+
|[[AdminGroup]]
| create groups; change groups' name, description, and rights
|+
|[[AdminGroupMembership]]
| add and remove members from a group
|+
|[[AdminOwnPersonalGroups]]
|change name, description, and members of their own personal groups
|+
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|+
|[[AdminUsers]]
| create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers,  comments about the user, signature, password, organization and rights.
|+
|[[AssignCustomFields]]
| ???
|+
|[[CommentOnTicket]]
|add comments to tickets
|+
|[[CreateSavedSearch]]
|save a ticket search
|+
|[[CreateTicket]]
|create tickets
|+
|[[DelegateRights]]
|assign their own rights to other users
|+
|[[DeleteTicket]]
|delete tickets
|+
|[[EditSavedSearches]]
|edit a ticket search you've previously saved
|+
|[[LoadSavedSearch]]
|load a ticket search you've previously saved
|+
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]] right.
|+
|[[ModifyCustomField]]
|change and set values in a custom field you've defined
|+
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|+
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|+
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|+
|[[ModifySelf]]
|modify your own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature.
|+
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|+
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue,  dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|+
|[[OwnTicket]]
|own (be responsible for) a ticket
|+
|[[ReplyToTicket]]
| add replies to a ticket
|+
|[[SeeQueue]]
| know that a queue exists; queues will appear in visible listings for this user
|+
|[[ShowACL]]
|see the rights granted to users and groups
|+
|[[ShowConfigTab]]
|have access to the Configuration (Admin) tab
|+
|[[ShowOutgoingEmail]]
|see full text of emails sent by RT
|+
|[[ShowSavedSearches]]
|list or load [[SavedSearch]]es
|+
|[[ShowScrips]]
|see scrips
|+
|[[ShowTemplate]]
|see scrips' email templates
|+
|[[ShowTicket]]
|see tickets
|+
|[[ShowTicketComments]]
|see comments attached to tickets
|+
|[[SuperUser]]
|everything; this user has all possible rights within RT - careful!
|+
|[[Watch]]
|sign up as a requestor or [[CC]]
|+
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|+ 
|}


Table 2: Queue rights
See also [[Rights]] article.
{| class="wikitable" cellpadding="3" width="100%"
|+
!Name of right
!What users with this right can do
|+
|[[AdminCustomFields]]
|add, delete, and modify custom fields
|+
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|+
|[[CommentOnTicket]]
|add comments to tickets
|+
|[[CreateTicket]]
|create tickets
|+
|[[DeleteTicket]]
|delete tickets
|+
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the right [[ShowACL]]
|+
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|+
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|+
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|+
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue,  dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|+
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|+
|[[ReplyToTicket]]
|add replies to a ticket
|+
|[[SeeQueue]]
|know that a queue exists; queues will appear in visible listings for this user
|+
|[[ShowACL]]
|see the rights granted to users and groups
|+
|[[ShowScrips]]
|see scrips
|+
|[[ShowTemplate]]
|see scrips email templates
|+
|[[ShowTicket]]
|see tickets
|+
|[[ShowTicketComments]]
|see comments attached to tickets
|+
|[[Watch]]
|sign up as a requestor or [[CC]]
|+
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|+
|}


Table 3: Group rights
If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an [https://metacpan.org/pod/RT::Extension::RightsInspector extension] for RT 4.4 and it is a core feature starting in RT 5.0.
{| class="wikitable" cellpadding="3" width="100%"
|+
!Name of right
!What users with this right can do
|+
|[[AdminGroup]]
|create groups; change groups' name, description, and rights
|+
|[[AdminGroupMembership]]
|add and remove members from a group
|+
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]]
|+
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|+
|}




Line 221: Line 42:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
[[Category:RT User Manual]]
[[Category:RT User Manual]]
[[Category:RT44]]

Latest revision as of 13:29, 18 February 2021

Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Global group rights

Appendix 2 Rights

This is a reference for rights in RT.

There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.

Below is a list of all the areas in RT to update group and user rights. From the Admin menu:


  • Custom Fields
  • Custom Fields > Select > [select custom field] > Group Rights
  • Custom Fields > Select > [select custom field] > User Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights
Queue level rights by group
  • Groups
  • Groups > Select > [select group] > Group Rights
  • Groups > Select > [select group] > User Rights
  • Global > Group Rights
  • Queues
  • Queue > Select > [select queue] > Group Rights
  • Queue > Select > [select queue] > User Rights
  • Users (not suggested)
  • Global > User Rights


See also Rights article.

If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an extension for RT 4.4 and it is a core feature starting in RT 5.0.


Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Retrieved from "https://rt-wiki.bestpractical.com/index.php?title=ManualRights&oldid=26998"