ManualRights: Difference between revisions

From Request Tracker Wiki
Jump to navigation Jump to search
No edit summary
(Added StrictLinkACL)
Line 11: Line 11:
'''Table 1: Global rights'''
'''Table 1: Global rights'''
{| class="wikitable" cellpadding="3" width="100%"
{| class="wikitable" cellpadding="3" width="100%"
|+
|+ 
!Name of right
|+ 
!What users with this right can do
|+ 
|+
|+ 
|[[CreateTicket]]
|+ 
|create tickets
|+ 
|+
|+ 
|[[ShowACL]]
|+ 
|see the rights granted to users and groups
|+ 
|+
|+ 
|[[CreateSavedSearch]]
|+ 
|save a ticket search
|+ 
|+
|+ 
|[[SeeQueue]]
|+ 
| know that a queue exists; queues will appear in visible listings for this user
|+ 
|+
|+ 
|[[CommentOnTicket]]
|+ 
|add comments to tickets
|+ 
|+
|+ 
|[[ShowOutgoingEmail]]
|+ 
|see full text of emails sent by RT
|+ 
|+
|+ 
|[[AssignCustomFields]]
|+ 
| ???
|+ 
|+
|+ 
|[[ShowSavedSearches]]
|+ 
|list or load saved ticket searches
|+ 
|+
|+ 
|[[AdminUsers]]
|+ 
| create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers, comments about the user, signature, password, organization and rights.
|+ 
|+
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|-
|[[ShowScrips]]
|see scrips
|-
|[[SuperUser]]
|everything; this user has all possible rights within RT - careful!
|-
|[[DelegateRights]]
|[[DelegateRights]]
|assign their own rights to other users
|assign their own rights to other users
|+
|-
|[[ShowScrips]]
|see scrips
|+
|[[ReplyToTicket]]
| add replies to a ticket
|+
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|+
|[[DeleteTicket]]
|delete tickets
|+
|[[ShowTemplate]]
|see scrips' email templates
|+
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|+
|[[AdminOwnPersonalGroups]]
|change name, description, and members of their own personal groups
|+
|[[EditSavedSearches]]
|edit a ticket search you've previously saved
|+
|[[ShowTicket]]
|see tickets
|+
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|+
|[[AdminGroupMembership]]
| add and remove members from a group
|+
|[[LoadSavedSearch]]
|load a ticket search you've previously saved
|+
|[[ShowTicketComments]]
|see comments attached to tickets
|+
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|+
|[[AdminGroup]]
| create groups; change groups' name, description, and rights
|+
|[[ModifyACL]]
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]] right.
|change users' and groups' rights. Users with this right should also have the [[ShowACL]] right.
|+
|-
|[[SuperUser]]
|[[AdminUsers]]
|everything; this user has all possible rights within RT - careful!
| create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers, comments about the user, signature, password, organization and rights.
|+
|-
|[[ModifySelf]]
|modify your own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature.
|+
|[[AdminCustomFields]]
|[[AdminCustomFields]]
| add, delete, and modify custom fields
| add, delete, and modify custom fields
|+
|-
|[[ShowSavedSearches]]
|list or load saved ticket searches
|-
|[[ModifyCustomField]]
|[[ModifyCustomField]]
|change and set values in a custom field you've defined
|change and set values in a custom field you've defined
|+
|-
|[[AssignCustomFields]]
| ???
|-
|[[ReplyToTicket]]
| add replies to a ticket
|-
|[[Watch]]
|[[Watch]]
|sign up as a requestor or [[CC]]
|sign up as a requestor or [[CC]]
|+
|-
|[[AdminGroup]]
| create groups; change groups' name, description, and rights
|-
|[[ShowOutgoingEmail]]
|see full text of emails sent by RT
|-
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|-
|[[ModifyScrips]]
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|add, delete, and change the content of scrips
|+
|-
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|-
|[[CommentOnTicket]]
|add comments to tickets
|-
|[[DeleteTicket]]
|delete tickets
|-
|[[AdminAllPersonalGroups]]
|[[AdminAllPersonalGroups]]
|change name, description, and members of any personal group
|change name, description, and members of any personal group
|+
|-
|[[ShowTicketComments]]
|see comments attached to tickets
|-
|[[SeeQueue]]
| know that a queue exists; queues will appear in visible listings for this user
|-
|[[ShowTemplate]]
|see scrips' email templates
|-
|[[ModifyOwnMembership]]
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|add or remove themselves from a group
|+
|-
|[[LoadSavedSearch]]
|load a ticket search you've previously saved
|-
|[[CreateSavedSearch]]
|save a ticket search
|-
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|-
|[[WatchAsAdminCc]]
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|sign up as an [[AdminCC]]
|+
|-
|[[AdminGroupMembership]]
| add and remove members from a group
|-
|[[ShowACL]]
|see the rights granted to users and groups
|-
|[[AdminOwnPersonalGroups]]
|change name, description, and members of their own personal groups
|-
|[[ModifyQueueWatchers]]
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|add and remove [[CC]]s and [[AdminCC]]s
|+
|-
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|-
|[[CreateTicket]]
|create tickets
|-
|[[EditSavedSearches]]
|edit a ticket search you've previously saved
|-
|[[ShowConfigTab]]
|[[ShowConfigTab]]
|have access to the Configuration (Admin) tab
|have access to the Configuration (Admin) tab
|+
|-
|
<p class="p1">StrictLinkACL</p>
|require that operator trying to link tickets has ModifyTicket on all relevant Tickets; disabling this will allow a user to link tickets so long as they have ModifyTicket on at least one of the tickets involved
|-
|[[ShowTicket]]
|see tickets
|-
!Name of right
!What users with this right can do
|-
|[[ModifySelf]]
|modify your own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature.
|}
|}


'''Table 2: Queue rights'''
'''Table 2: Queue rights'''
{| class="wikitable" cellpadding="3" width="100%"
{| class="wikitable" cellpadding="3" width="100%"
|+
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|-
!Name of right
!Name of right
!What users with this right can do
!What users with this right can do
|+
|-
|[[ShowACL]]
|[[ReplyToTicket]]
|see the rights granted to users and groups
|add replies to a ticket
|+
|-
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the right [[ShowACL]]
|+
|[[ShowScrips]]
|see scrips
|+
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|+
|[[ShowTemplate]]
|see scrips email templates
|+
|[[CreateTicket]]
|[[CreateTicket]]
|create tickets
|create tickets
|+
|-
|[[AdminCustomFields]]
|add, delete, and modify custom fields
|-
|[[ShowTicket]]
|[[ShowTicket]]
|see tickets
|see tickets
|+
|-
|[[CommentOnTicket]]
|add comments to tickets
|+
|[[ShowTicketComments]]
|see comments attached to tickets
|+
|[[SeeQueue]]
|know that a queue exists; queues will appear in visible listings for this user
|+
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|+
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|+
|[[Watch]]
|sign up as a requestor or [[CC]]
|+
|[[ReplyToTicket]]
|add replies to a ticket
|+
|[[AdminCustomFields]]
|add, delete, and modify custom fields
|+
|[[ModifyTemplate]]
|[[ModifyTemplate]]
|create, modify, and delete scrip templates
|create, modify, and delete scrip templates
|+
|-
|[[ModifyQueueWatchers]]
|add and remove [[CC]]s and [[AdminCC]]s
|-
|[[WatchAsAdminCc]]
|[[WatchAsAdminCc]]
|sign up as an [[AdminCC]]
|sign up as an [[AdminCC]]
|+
|-
|[[ShowScrips]]
|see scrips
|-
|[[OwnTicket]]
|[[OwnTicket]]
|own (be responsible for/take) a ticket
|own (be responsible for/take) a ticket
|+
|-
|[[Watch]]
|sign up as a requestor or [[CC]]
|-
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the right [[ShowACL]]
|-
|[[CommentOnTicket]]
|add comments to tickets
|-
|[[ModifyTicket]]
|[[ModifyTicket]]
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
|+
|-
|[[ModifyScrips]]
|add, delete, and change the content of scrips
|-
|[[ShowACL]]
|see the rights granted to users and groups
|-
|[[ShowTicketComments]]
|see comments attached to tickets
|-
|[[DeleteTicket]]
|[[DeleteTicket]]
|delete tickets
|delete tickets
|+
|-
|[[AdminQueue]]
|create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
|-
|[[SeeQueue]]
|know that a queue exists; queues will appear in visible listings for this user
|-
|[[ShowTemplate]]
|see scrips email templates
|}
|}


'''Table 3: Group rights'''
'''Table 3: Group rights'''
{| class="wikitable" cellpadding="3" width="100%"
{| class="wikitable" cellpadding="3" width="100%"
|+
|+ 
|+ 
|+ 
|+ 
|+ 
|+ 
|-
!Name of right
!Name of right
!What users with this right can do
!What users with this right can do
|+
|-
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|-
|[[ModifyACL]]
|[[ModifyACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]]
|change users' and groups' rights. Users with this right should also have the [[ShowACL]]
|+
|-
|[[AdminGroupMembership]]
|add and remove members from a group
|-
|[[AdminGroup]]
|[[AdminGroup]]
|create groups; change groups' name, description, and rights
|create groups; change groups' name, description, and rights
|+
|[[ModifyOwnMembership]]
|add or remove themselves from a group
|+
|[[AdminGroupMembership]]
|add and remove members from a group
|+
|}
|}


Revision as of 15:13, 2 March 2014

Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Appendix 2 Rights

This is a reference for rights in RT. The rights are broken down into three tables: global, queue, and group. Within those tables, rights are listed alphabetically. Each right has full description on wiki.

See also Rights article.

(Careful when you edit tables - you might need to manually reformat them)

Table 1: Global rights

                                                                             
ShowScrips see scrips
SuperUser everything; this user has all possible rights within RT - careful!
DelegateRights assign their own rights to other users
ModifyACL change users' and groups' rights. Users with this right should also have the ShowACL right.
AdminUsers create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers, comments about the user, signature, password, organization and rights.
AdminCustomFields add, delete, and modify custom fields
ShowSavedSearches list or load saved ticket searches
ModifyCustomField change and set values in a custom field you've defined
AssignCustomFields ???
ReplyToTicket add replies to a ticket
Watch sign up as a requestor or CC
AdminGroup create groups; change groups' name, description, and rights
ShowOutgoingEmail see full text of emails sent by RT
AdminQueue create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
ModifyScrips add, delete, and change the content of scrips
ModifyTemplate create, modify, and delete scrip templates
CommentOnTicket add comments to tickets
DeleteTicket delete tickets
AdminAllPersonalGroups change name, description, and members of any personal group
ShowTicketComments see comments attached to tickets
SeeQueue know that a queue exists; queues will appear in visible listings for this user
ShowTemplate see scrips' email templates
ModifyOwnMembership add or remove themselves from a group
LoadSavedSearch load a ticket search you've previously saved
CreateSavedSearch save a ticket search
OwnTicket own (be responsible for/take) a ticket
WatchAsAdminCc sign up as an AdminCC
AdminGroupMembership add and remove members from a group
ShowACL see the rights granted to users and groups
AdminOwnPersonalGroups change name, description, and members of their own personal groups
ModifyQueueWatchers add and remove CCs and AdminCCs
ModifyTicket change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
CreateTicket create tickets
EditSavedSearches edit a ticket search you've previously saved
ShowConfigTab have access to the Configuration (Admin) tab

StrictLinkACL

 require that operator trying to link tickets has ModifyTicket on all relevant Tickets; disabling this will allow a user to link tickets so long as they have ModifyTicket on at least one of the tickets involved
ShowTicket see tickets
Name of right What users with this right can do
ModifySelf modify your own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature.

Table 2: Queue rights

                                           
Name of right What users with this right can do
ReplyToTicket add replies to a ticket
CreateTicket create tickets
AdminCustomFields add, delete, and modify custom fields
ShowTicket see tickets
ModifyTemplate create, modify, and delete scrip templates
ModifyQueueWatchers add and remove CCs and AdminCCs
WatchAsAdminCc sign up as an AdminCC
ShowScrips see scrips
OwnTicket own (be responsible for/take) a ticket
Watch sign up as a requestor or CC
ModifyACL change users' and groups' rights. Users with this right should also have the right ShowACL
CommentOnTicket add comments to tickets
ModifyTicket change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
ModifyScrips add, delete, and change the content of scrips
ShowACL see the rights granted to users and groups
ShowTicketComments see comments attached to tickets
DeleteTicket delete tickets
AdminQueue create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
SeeQueue know that a queue exists; queues will appear in visible listings for this user
ShowTemplate see scrips email templates

Table 3: Group rights

           
Name of right What users with this right can do
ModifyOwnMembership add or remove themselves from a group
ModifyACL change users' and groups' rights. Users with this right should also have the ShowACL
AdminGroupMembership add and remove members from a group
AdminGroup create groups; change groups' name, description, and rights


Prev: ManualAdministration --- Up: UserManual --- Next: ManualScrips

Retrieved from "https://rt-wiki.bestpractical.com/index.php?title=ManualRights&oldid=2094"