ManualRights: Difference between revisions

From Request Tracker Wiki
Jump to navigation Jump to search
(Undo revision 7953 by 50.156.101.193 (talk))
No edit summary
 
(5 intermediate revisions by 3 users not shown)
Line 1: Line 1:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
[[File:Global-Group-Rights.png|Global group rights|thumb|500px]]


'''Appendix 2 Rights'''
'''Appendix 2 Rights'''


This is a reference for rights in RT. The rights are broken down into three tables: global, queue, and group. Within those tables, rights are listed alphabetically. Each right has full description on wiki.
This is a reference for rights in RT.


See also [[Rights]] article.
There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.
 
Below is a list of all the areas in RT to update group and user rights. From the Admin menu:
 
 
* Custom Fields
:* Custom Fields > Select > [select custom field] > Group Rights
:* Custom Fields > Select > [select custom field] > User Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
:* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights
 
[[File:Queue-Group-Rights.png|Queue level rights by group|thumb|500px]]
 
* Groups
:* Groups > Select > [select group] > Group Rights
:* Groups > Select > [select group] > User Rights
:* Global > Group Rights
 
* Queues
:* Queue > Select > [select queue] > Group Rights
:* Queue > Select > [select queue] > User Rights


(Careful when you edit tables - you might need to manually reformat them)
* Users (not suggested)
:* Global > User Rights


'''Table 1: Global rights'''
{| class="wikitable" cellpadding="3" width="100%"
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|-
|[[ShowScrips]]
|see scrips
|-
|[[SuperUser]]
|everything; this user has all possible rights within RT - careful!
|-
|[[DelegateRights]]
|assign their own rights to other users
|-
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]] right.
|-
|[[AdminUsers]]
| create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers, comments about the user, signature, password, organization and rights.
|-
|[[AdminCustomFields]]
| add, delete, and modify custom fields
|-
|[[ShowSavedSearches]]
|list or load saved ticket searches
|-
|[[ModifyCustomField]]
|change and set values in a custom field you've defined
|-
|[[AssignCustomFields]]
| ???
|-
|[[ReplyToTicket]]
| add replies to a ticket
|-
|[[Watch]]
|sign up as a requestor or [[CC]]
|-
|[[AdminGroup]]
| create groups; change groups' name, description, and rights
|-
|[[ShowOutgoingEmail]]
|see full text of emails sent by RT
|-
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|-
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|-
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|-
|[[CommentOnTicket]]
|add comments to tickets
|-
|[[DeleteTicket]]
|delete tickets
|-
|[[AdminAllPersonalGroups]]
|change name, description, and members of any personal group
|-
|[[ShowTicketComments]]
|see comments attached to tickets
|-
|[[SeeQueue]]
| know that a queue exists; queues will appear in visible listings for this user
|-
|[[ShowTemplate]]
|see scrips' email templates
|-
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|-
|[[LoadSavedSearch]]
|load a ticket search you've previously saved
|-
|[[CreateSavedSearch]]
|save a ticket search
|-
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|-
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|-
|[[AdminGroupMembership]]
| add and remove members from a group
|-
|[[ShowACL]]
|see the rights granted to users and groups
|-
|[[AdminOwnPersonalGroups]]
|change name, description, and members of their own personal groups
|-
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|-
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|-
|[[CreateTicket]]
|create tickets
|-
|[[EditSavedSearches]]
|edit a ticket search you've previously saved
|-
|[[ShowConfigTab]]
|have access to the Configuration (Admin) tab
|-
|[[ShowTicket]]
|see tickets
|-
!Name of right
!What users with this right can do
|-
|[[ModifySelf]]
|modify your own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature.
|}


'''Table 2: Queue rights'''
See also [[Rights]] article.
{| class="wikitable" cellpadding="3" width="100%"
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|-
!Name of right
!What users with this right can do
|-
|[[ReplyToTicket]]
|add replies to a ticket
|-
|[[CreateTicket]]
|create tickets
|-
|[[AdminCustomFields]]
|add, delete, and modify custom fields
|-
|[[ShowTicket]]
|see tickets
|-
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|-
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|-
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|-
|[[ShowScrips]]
|see scrips
|-
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|-
|[[Watch]]
|sign up as a requestor or [[CC]]
|-
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the right [[ShowACL]]
|-
|[[CommentOnTicket]]
|add comments to tickets
|-
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|-
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|-
|[[ShowACL]]
|see the rights granted to users and groups
|-
|[[ShowTicketComments]]
|see comments attached to tickets
|-
|[[DeleteTicket]]
|delete tickets
|-
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|-
|[[SeeQueue]]
|know that a queue exists; queues will appear in visible listings for this user
|-
|[[ShowTemplate]]
|see scrips email templates
|}


'''Table 3: Group rights'''
If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an [https://metacpan.org/pod/RT::Extension::RightsInspector extension] for RT 4.4 and it is a core feature starting in RT 5.0.
{| class="wikitable" cellpadding="3" width="100%"
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|-
!Name of right
!What users with this right can do
|-
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|-
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]]
|-
|[[AdminGroupMembership]]
|add and remove members from a group
|-
|[[AdminGroup]]
|create groups; change groups' name, description, and rights
|}




Line 285: Line 42:
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]]
[[Category:RT User Manual]]
[[Category:RT User Manual]]
[[Category:RT44]]

Latest revision as of 13:29, 18 February 2021

Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Global group rights

Appendix 2 Rights

This is a reference for rights in RT.

There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights.

Below is a list of all the areas in RT to update group and user rights. From the Admin menu:


  • Custom Fields
  • Custom Fields > Select > [select custom field] > Group Rights
  • Custom Fields > Select > [select custom field] > User Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights
  • Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights
Queue level rights by group
  • Groups
  • Groups > Select > [select group] > Group Rights
  • Groups > Select > [select group] > User Rights
  • Global > Group Rights
  • Queues
  • Queue > Select > [select queue] > Group Rights
  • Queue > Select > [select queue] > User Rights
  • Users (not suggested)
  • Global > User Rights


See also Rights article.

If you have an RT with existing rights set up and you are trying to find which of the above was used to grant them, you can use the Rights Inspector. This tool is available as an extension for RT 4.4 and it is a core feature starting in RT 5.0.


Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Retrieved from "https://rt-wiki.bestpractical.com/index.php?title=ManualRights&oldid=26998"