ManualRights: Difference between revisions

From Request Tracker Wiki
Jump to navigation Jump to search
No edit summary
No edit summary
 
(7 intermediate revisions by 4 users not shown)
Line 1: Line 1:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
[[File:Global-Group-Rights.png|Global group rights|thumb|500px]]


'''Appendix 2 Rights'''
'''Appendix 2 Rights'''


This is a reference for rights in RT. The rights are broken down into three tables: global, queue, and group. Within those tables, rights are listed alphabetically. Each right has full description on wiki.
This is a reference for rights in RT.


See also [[Rights]] article.
There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.
 
Below is a list of all the areas in RT to update group and user rights. From the Admin menu:
 
 
* Custom Fields
:* Custom Fields > Select > [select custom field] > Group Rights
:* Custom Fields > Select > [select custom field] > User Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights
 
[[File:Queue-Group-Rights.png|Queue level rights by group|thumb|500px]]
 
* Groups
:* Groups > Select > [select group] > Group Rights
:* Groups > Select > [select group] > User Rights
:* Global > Group Rights
 
* Queues
:* Queue > Select > [select queue] > Group Rights
:* Queue > Select > [select queue] > User Rights


(Careful when you edit tables - you might need to manually reformat them)
* Users (not suggested)
:* Global > User Rights


'''Table 1: Global rights'''
{| class="wikitable" cellpadding="3" width="100%"
|+
!Name of right
!What users with this right can do
|+ 
|[[CreateTicket]]
|create tickets
|+
|[[ShowACL]]
|see the rights granted to users and groups
|+
|[[CreateSavedSearch]]
|save a ticket search
|+
|[[SeeQueue]]
| know that a queue exists; queues will appear in visible listings for this user
|+
|[[CommentOnTicket]]
|add comments to tickets
|+
|[[ShowOutgoingEmail]]
|see full text of emails sent by RT
|+
|[[AssignCustomFields]]
| ???
|+
|[[ShowSavedSearches]]
|list or load saved ticket searches
|+
|[[AdminUsers]]
| create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers, comments about the user, signature, password, organization and rights.
|+
|[[DelegateRights]]
|assign their own rights to other users
|+
|[[ShowScrips]]
|see scrips
|+
|[[ReplyToTicket]]
| add replies to a ticket
|+
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|+
|[[DeleteTicket]]
|delete tickets
|+
|[[ShowTemplate]]
|see scrips' email templates
|+
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|+
|[[AdminOwnPersonalGroups]]
|change name, description, and members of their own personal groups
|+
|[[EditSavedSearches]]
|edit a ticket search you've previously saved
|+
|[[ShowTicket]]
|see tickets
|+
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|+
|[[AdminGroupMembership]]
| add and remove members from a group
|+
|[[LoadSavedSearch]]
|load a ticket search you've previously saved
|+
|[[ShowTicketComments]]
|see comments attached to tickets
|+
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|+
|[[AdminGroup]]
| create groups; change groups' name, description, and rights
|+
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]] right.
|+
|[[SuperUser]]
|everything; this user has all possible rights within RT - careful!
|+
|[[ModifySelf]]
|modify your own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature.
|+
|[[AdminCustomFields]]
| add, delete, and modify custom fields
|+
|[[ModifyCustomField]]
|change and set values in a custom field you've defined
|+
|[[Watch]]
|sign up as a requestor or [[CC]]
|+
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|+
|[[AdminAllPersonalGroups]]
|change name, description, and members of any personal group
|+
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|+
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|+
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|+
|[[ShowConfigTab]]
|have access to the Configuration (Admin) tab
|+
|}


'''Table 2: Queue rights'''
See also [[Rights]] article.
{| class="wikitable" cellpadding="3" width="100%"
|+
!Name of right
!What users with this right can do
|+
|[[ShowACL]]
|see the rights granted to users and groups
|+
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the right [[ShowACL]]
|+
|[[ShowScrips]]
|see scrips
|+
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|+
|[[ShowTemplate]]
|see scrips email templates
|+
|[[CreateTicket]]
|create tickets
|+
|[[ShowTicket]]
|see tickets
|+
|[[CommentOnTicket]]
|add comments to tickets
|+
|[[ShowTicketComments]]
|see comments attached to tickets
|+
|[[SeeQueue]]
|know that a queue exists; queues will appear in visible listings for this user
|+
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|+
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|+
|[[Watch]]
|sign up as a requestor or [[CC]]
|+
|[[ReplyToTicket]]
|add replies to a ticket
|+
|[[AdminCustomFields]]
|add, delete, and modify custom fields
|+
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|+
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|+
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|+
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|+
|[[DeleteTicket]]
|delete tickets
|+
|}


'''Table 3: Group rights'''
If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an [https://metacpan.org/pod/RT::Extension::RightsInspector extension] for RT 4.4 and it is a core feature starting in RT 5.0.
{| class="wikitable" cellpadding="3" width="100%"
|+ 
!Name of right
!What users with this right can do
|+
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]]
|+
|[[AdminGroup]]
|create groups; change groups' name, description, and rights
|+
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|+
|[[AdminGroupMembership]]
|add and remove members from a group
|+
|}




Line 221: Line 42:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
[[Category:RT User Manual]]
[[Category:RT User Manual]]
[[Category:RT44]]

Latest revision as of 13:29, 18 February 2021

Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Global group rights

Appendix 2 Rights

This is a reference for rights in RT.

There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.

Below is a list of all the areas in RT to update group and user rights. From the Admin menu:


  • Custom Fields
  • Custom Fields > Select > [select custom field] > Group Rights
  • Custom Fields > Select > [select custom field] > User Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights
Queue level rights by group
  • Groups
  • Groups > Select > [select group] > Group Rights
  • Groups > Select > [select group] > User Rights
  • Global > Group Rights
  • Queues
  • Queue > Select > [select queue] > Group Rights
  • Queue > Select > [select queue] > User Rights
  • Users (not suggested)
  • Global > User Rights


See also Rights article.

If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an extension for RT 4.4 and it is a core feature starting in RT 5.0.


Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Retrieved from "https://rt-wiki.bestpractical.com/index.php?title=ManualRights&oldid=26998"