Mailing List Archive: Request Tracker: Devel

ACLs defined by extensions

Index | Next | Previous | View Threaded

dominic.hargreaves at oucs

Oct 8, 2009, 8:09 AM

Post #1 of 2 (778 views)
Permalink

ACLs defined by extensions

I'm interested in additing some ACL checking functionality to
RTx::EmailCompletion[1] but there doesn't seem to be any existing
ACL that corresponds to "view all users" (and in any case I'd want
a separate one for "view all LDAP users"). I'm not sure whether it's
possible to easily define a new ACL in an extension without making
schema management a nightmare; does anyone have any thoughts on this?

Thanks,
Dominic.

[1] https://rt.cpan.org/Ticket/Display.html?id=50338

--
Dominic Hargreaves, Systems Development and Support Team
Computing Services, University of Oxford
_______________________________________________
List info: http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-devel

falcone at bestpractical

Oct 8, 2009, 8:42 AM

Post #2 of 2 (722 views)
Permalink

Re: ACLs defined by extensions [In reply to]

On Thu, Oct 08, 2009 at 04:09:03PM +0100, Dominic Hargreaves wrote:
> I'm interested in additing some ACL checking functionality to
> RTx::EmailCompletion[1] but there doesn't seem to be any existing
> ACL that corresponds to "view all users" (and in any case I'd want
> a separate one for "view all LDAP users"). I'm not sure whether it's
> possible to easily define a new ACL in an extension without making
> schema management a nightmare; does anyone have any thoughts on this?

New ACLs don't have to change the DB schema.
You can inject new rights into the package %RIGHTS and
RT::ACE::LOWERCASERIGHTNAMES to make a new ACL available.

Depending on what you're doing with user info, you may also need to
tweak User::Accessible

-kevin

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads