|
|
| Line 1: |
Line 1: |
| Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]] | | Prev: [[ManualAdministration]] --- Up: [[UserManual]] --- Next: [[ManualScrips]] |
| | |
| | [[File:Global-Group-Rights.png|Global group rights|thumb|500px]] |
|
| |
|
| '''Appendix 2 Rights''' | | '''Appendix 2 Rights''' |
|
| |
|
| This is a reference for rights in RT. The rights are broken down into three tables: global, queue, and group. Within those tables, rights are listed alphabetically. Each right has full description on wiki. | | This is a reference for rights in RT. |
|
| |
|
| See also [[Rights]] article.
| | There are a great deal of places in RT where you can assign rights to a group or a user. While this is a feature of RT, we recommend adding users to a group, then applying rights directly on that group. When rights are granted on specific users, it can become more challenging to manage each user's rights. A quicker way to view all the rights a user has on one page, is to use the RT Rights Inspector. This an RT extension that must be installed, you can find it here: https://metacpan.org/pod/RT::Extension::RightsInspector. |
| | |
| | Below is a list of all the areas in RT to update group and user rights. From the Admin menu: |
| | |
| | |
| | * Custom Fields |
| | :* Custom Fields > Select > [select custom field] > Group Rights |
| | :* Custom Fields > Select > [select custom field] > User Rights |
| | :* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > Group Rights |
| | :* Global > Custom Fields > [select Users, Groups, Queues, Tickets, Articles, Assets] > [select custom field] > User Rights |
| | |
| | [[File:Queue-Group-Rights.png|Queue level rights by group|thumb|500px]] |
| | |
| | * Groups |
| | :* Groups > Select > [select group] > Group Rights |
| | :* Groups > Select > [select group] > User Rights |
| | :* Global > Group Rights |
| | |
| | * Queues |
| | :* Queue > Select > [select queue] > Group Rights |
| | :* Queue > Select > [select queue] > User Rights |
|
| |
|
| (Careful when you edit tables - you might need to manually reformat them) | | * Users (not suggested) |
| | :* Global > User Rights |
|
| |
|
| '''Table 1: Global rights'''
| |
| {| class="wikitable" cellpadding="3" width="100%"
| |
| !Name of right
| |
| !What users with this right can do
| |
| |- valign="top"
| |
| |[[ShowScrips]]
| |
| |see scrips
| |
| |- valign="top"
| |
| |[[SuperUser]]
| |
| |everything; this user has all possible rights within RT - careful!
| |
| |- valign="top"
| |
| |[[DelegateRights]]
| |
| |assign their own rights to other users
| |
| |- valign="top"
| |
| |[[ModifyACL]]
| |
| |change users' and groups' rights. Users with this right should also have the [[ShowACL]] right.
| |
| |- valign="top"
| |
| |[[AdminUsers]]
| |
| | create users; change anything on users' Basics screen: username, email, name, nickname, Unix login, address, phone numbers, comments about the user, signature, password, organization and rights.
| |
| |- valign="top"
| |
| |[[AdminCustomFields]]
| |
| | add, delete, and modify custom fields
| |
| |- valign="top"
| |
| |[[ShowSavedSearches]]
| |
| |list or load saved ticket searches
| |
| |- valign="top"
| |
| |[[ModifyCustomField]]
| |
| |change and set values in a custom field you've defined
| |
| |- valign="top"
| |
| |[[AssignCustomFields]]
| |
| | ???
| |
| |- valign="top"
| |
| |[[ReplyToTicket]]
| |
| | add replies to a ticket
| |
| |- valign="top"
| |
| |[[Watch]]
| |
| |sign up as a requestor or [[CC]]
| |
| |- valign="top"
| |
| |[[AdminGroup]]
| |
| | create groups; change groups' name, description, and rights
| |
| |- valign="top"
| |
| |[[ShowOutgoingEmail]]
| |
| |see full text of emails sent by RT
| |
| |- valign="top"
| |
| |[[AdminQueue]]
| |
| |create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
| |
| |- valign="top"
| |
| |[[ModifyScrips]]
| |
| |add, delete, and change the content of scrips
| |
| |- valign="top"
| |
| |[[ModifyTemplate]]
| |
| |create, modify, and delete scrip templates
| |
| |- valign="top"
| |
| |[[CommentOnTicket]]
| |
| |add comments to tickets
| |
| |- valign="top"
| |
| |[[DeleteTicket]]
| |
| |delete tickets
| |
| |- valign="top"
| |
| |[[AdminAllPersonalGroups]]
| |
| |change name, description, and members of any personal group
| |
| |- valign="top"
| |
| |[[ShowTicketComments]]
| |
| |see comments attached to tickets
| |
| |- valign="top"
| |
| |[[SeeQueue]]
| |
| | know that a queue exists; queues will appear in visible listings for this user
| |
| |- valign="top"
| |
| |[[ShowTemplate]]
| |
| |see scrips' email templates
| |
| |- valign="top"
| |
| |[[ModifyOwnMembership]]
| |
| |add or remove themselves from a group
| |
| |- valign="top"
| |
| |[[LoadSavedSearch]]
| |
| |load a ticket search you've previously saved
| |
| |- valign="top"
| |
| |[[CreateSavedSearch]]
| |
| |save a ticket search
| |
| |- valign="top"
| |
| |[[OwnTicket]]
| |
| |own (be responsible for/take) a ticket
| |
| |- valign="top"
| |
| |[[WatchAsAdminCc]]
| |
| |sign up as an [[AdminCC]]
| |
| |- valign="top"
| |
| |[[AdminGroupMembership]]
| |
| | add and remove members from a group
| |
| |- valign="top"
| |
| |[[ShowACL]]
| |
| |see the rights granted to users and groups
| |
| |- valign="top"
| |
| |[[AdminOwnPersonalGroups]]
| |
| |change name, description, and members of their own personal groups
| |
| |- valign="top"
| |
| |[[ModifyQueueWatchers]]
| |
| |add and remove [[CC]]s and [[AdminCC]]s
| |
| |- valign="top"
| |
| |[[ModifyTicket]]
| |
| |change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
| |
| |- valign="top"
| |
| |[[CreateTicket]]
| |
| |create tickets
| |
| |- valign="top"
| |
| |[[EditSavedSearches]]
| |
| |edit a ticket search you've previously saved
| |
| |- valign="top"
| |
| |[[ShowConfigTab]]
| |
| |have access to the Configuration (Admin) tab
| |
| |- valign="top"
| |
| |[[ShowTicket]]
| |
| |see tickets
| |
| |- valign="top"
| |
| |[[ModifySelf]]
| |
| |modify your own email address, real name, nickname, extra contact information, password, address, phone numbers, and signature.
| |
| |}
| |
|
| |
|
| '''Table 2: Queue rights'''
| | See also [[Rights]] article. |
| {| class="wikitable" cellpadding="3" width="100%"
| |
| !Name of right
| |
| !What users with this right can do
| |
| |- valign="top"
| |
| |[[ReplyToTicket]]
| |
| |add replies to a ticket
| |
| |- valign="top"
| |
| |[[CreateTicket]]
| |
| |create tickets
| |
| |- valign="top"
| |
| |[[AdminCustomFields]]
| |
| |add, delete, and modify custom fields
| |
| |- valign="top"
| |
| |[[ShowTicket]]
| |
| |see tickets
| |
| |- valign="top"
| |
| |[[ModifyTemplate]]
| |
| |create, modify, and delete scrip templates
| |
| |- valign="top"
| |
| |[[ModifyQueueWatchers]]
| |
| |add and remove [[CC]]s and [[AdminCC]]s
| |
| |- valign="top"
| |
| |[[WatchAsAdminCc]]
| |
| |sign up as an [[AdminCC]]
| |
| |- valign="top"
| |
| |[[ShowScrips]]
| |
| |see scrips
| |
| |- valign="top"
| |
| |[[OwnTicket]]
| |
| |own (be responsible for/take) a ticket
| |
| |- valign="top"
| |
| |[[Watch]]
| |
| |sign up as a requestor or [[CC]]
| |
| |- valign="top"
| |
| |[[ModifyACL]]
| |
| |change users' and groups' rights. Users with this right should also have the right [[ShowACL]]
| |
| |- valign="top"
| |
| |[[CommentOnTicket]]
| |
| |add comments to tickets
| |
| |- valign="top"
| |
| |[[ModifyTicket]]
| |
| |change tickets' subject, status, time worked, time left, priorities, queue, dates, watchers, owner, and relationships to other tickets; add comments and replies to tickets
| |
| |- valign="top"
| |
| |[[ModifyScrips]]
| |
| |add, delete, and change the content of scrips
| |
| |- valign="top"
| |
| |[[ShowACL]]
| |
| |see the rights granted to users and groups
| |
| |- valign="top"
| |
| |[[ShowTicketComments]]
| |
| |see comments attached to tickets
| |
| |- valign="top"
| |
| |[[DeleteTicket]]
| |
| |delete tickets
| |
| |- valign="top"
| |
| |[[AdminQueue]]
| |
| |create, enable, and disable queues; change queues' name, description, reply and comment address, priority, and due date
| |
| |- valign="top"
| |
| |[[SeeQueue]]
| |
| |know that a queue exists; queues will appear in visible listings for this user
| |
| |- valign="top"
| |
| |[[ShowTemplate]]
| |
| |see scrips email templates
| |
| |}
| |
|
| |
|
| '''Table 3: Group rights'''
| |
| {| class="wikitable" cellpadding="3" width="100%"
| |
| !Name of right
| |
| !What users with this right can do
| |
| |- valign="top"
| |
| |[[ModifyOwnMembership]]
| |
| |add or remove themselves from a group
| |
| |- valign="top"
| |
| |[[ModifyACL]]
| |
| |change users' and groups' rights. Users with this right should also have the [[ShowACL]]
| |
| |- valign="top"
| |
| |[[AdminGroupMembership]]
| |
| |add and remove members from a group
| |
| |- valign="top"
| |
| |[[AdminGroup]]
| |
| |create groups; change groups' name, description, and rights
| |
| |}
| |
|
| |
|
|
| |
|
