issues with permissions [SOLVED]

Moderator: crythias

Post Reply
rvaldomir
Znuny expert
Posts: 155
Joined: 04 Aug 2014, 23:59
Znuny Version: 3.3.8
Real Name: Roberto A. Valdomir

issues with permissions [SOLVED]

Post by rvaldomir »

Something strange it is happening with an agent user in random tickets.

A ticket is created, is being worked, everything is fine. But from a moment to another this ticket start to show more action items than normal (owner, responsible are shown up) and this user has no rights for that. If you check another ticket (same queue is correct, it is what I expect).


Permissions on users vs group checked, users vs roles checked, roles vs groups checked, also user checked in AD.
b.png
You do not have the required permissions to view the files attached to this post.
Last edited by rvaldomir on 16 May 2016, 18:12, edited 1 time in total.
​Roberto A. Valdomir
Mobile: (+598) 93 868 147 | Skype: roberto.a.valdomir
@roberto.valdomir | re.vu/robertovaldomir

----------------------------------------------------------------------------------------
OTRS 3.3.8 | RHEL 6 x64 | Oracle 11g | Custom Development by OTRS365
wheelshot
Znuny expert
Posts: 188
Joined: 15 Dec 2014, 20:49
Znuny Version: 4.0.24
Location: QC, Canada

Re: issues with permissions

Post by wheelshot »

Have you checked group vs queue? If youre saying the behaviour is different from one queue to another this might be a possibility that it aint the same group related.
RStraub
Znuny guru
Posts: 2210
Joined: 13 Mar 2014, 09:16
Znuny Version: 6.0.14
Real Name: Rolf Straub

Re: issues with permissions

Post by RStraub »

This baffles me as the tickets seem to be identical. Same queue, type, process...

If you have a dev/test setup you could try to deactivate one ACL after another and see where it chokes up.
Currently using: OTRS 6.0.14 -- MariaDB -- Ubuntu 16 LTS
wheelshot
Znuny expert
Posts: 188
Joined: 15 Dec 2014, 20:49
Znuny Version: 4.0.24
Location: QC, Canada

Re: issues with permissions

Post by wheelshot »

wheelshot wrote:Have you checked group vs queue? If youre saying the behaviour is different from one queue to another this might be a possibility that it aint the same group related.
My bad, didnt read right. Its in the same queue :shock:
rvaldomir
Znuny expert
Posts: 155
Joined: 04 Aug 2014, 23:59
Znuny Version: 3.3.8
Real Name: Roberto A. Valdomir

Re: issues with permissions

Post by rvaldomir »

RStraub wrote:This baffles me as the tickets seem to be identical. Same queue, type, process...

If you have a dev/test setup you could try to deactivate one ACL after another and see where it chokes up.
no because has no logic to do that if you the image same tickets are identically. :s
​Roberto A. Valdomir
Mobile: (+598) 93 868 147 | Skype: roberto.a.valdomir
@roberto.valdomir | re.vu/robertovaldomir

----------------------------------------------------------------------------------------
OTRS 3.3.8 | RHEL 6 x64 | Oracle 11g | Custom Development by OTRS365
rvaldomir
Znuny expert
Posts: 155
Joined: 04 Aug 2014, 23:59
Znuny Version: 3.3.8
Real Name: Roberto A. Valdomir

Re: issues with permissions

Post by rvaldomir »

What I found as difference between tickets is that the ones were acls are failing are linked to others.
​Roberto A. Valdomir
Mobile: (+598) 93 868 147 | Skype: roberto.a.valdomir
@roberto.valdomir | re.vu/robertovaldomir

----------------------------------------------------------------------------------------
OTRS 3.3.8 | RHEL 6 x64 | Oracle 11g | Custom Development by OTRS365
rvaldomir
Znuny expert
Posts: 155
Joined: 04 Aug 2014, 23:59
Znuny Version: 3.3.8
Real Name: Roberto A. Valdomir

Re: issues with permissions

Post by rvaldomir »

any help? will be really appreciated.
​Roberto A. Valdomir
Mobile: (+598) 93 868 147 | Skype: roberto.a.valdomir
@roberto.valdomir | re.vu/robertovaldomir

----------------------------------------------------------------------------------------
OTRS 3.3.8 | RHEL 6 x64 | Oracle 11g | Custom Development by OTRS365
rvaldomir
Znuny expert
Posts: 155
Joined: 04 Aug 2014, 23:59
Znuny Version: 3.3.8
Real Name: Roberto A. Valdomir

Re: issues with permissions

Post by rvaldomir »

up
​Roberto A. Valdomir
Mobile: (+598) 93 868 147 | Skype: roberto.a.valdomir
@roberto.valdomir | re.vu/robertovaldomir

----------------------------------------------------------------------------------------
OTRS 3.3.8 | RHEL 6 x64 | Oracle 11g | Custom Development by OTRS365
alexus
Znuny wizard
Posts: 380
Joined: 20 Sep 2010, 16:54
Znuny Version: OTRS 6 CE
Real Name: Alexey Yusov
Company: Radiant System Group s.r.o
Location: Prague
Contact:

Re: issues with permissions

Post by alexus »

What type of link is established between the tickets?
I'd recommend you to remove the link between them and check the issue.
Alexey Yusov

Production: OTRS CE ITSM 6.0.28 on CentOS 7 + Apache 2.4 + MariaDB 10.4.13 + Radiant Customer Portal

Radiant System OTRS Intergrator
RS4OTRS marketplace
Stay tuned on our Facebook
((OTRS)) Community Edition - what next?
rvaldomir
Znuny expert
Posts: 155
Joined: 04 Aug 2014, 23:59
Znuny Version: 3.3.8
Real Name: Roberto A. Valdomir

Re: issues with permissions

Post by rvaldomir »

Parent / child is the relationship.

Already tested, once removed everything works fine.
​Roberto A. Valdomir
Mobile: (+598) 93 868 147 | Skype: roberto.a.valdomir
@roberto.valdomir | re.vu/robertovaldomir

----------------------------------------------------------------------------------------
OTRS 3.3.8 | RHEL 6 x64 | Oracle 11g | Custom Development by OTRS365
alexus
Znuny wizard
Posts: 380
Joined: 20 Sep 2010, 16:54
Znuny Version: OTRS 6 CE
Real Name: Alexey Yusov
Company: Radiant System Group s.r.o
Location: Prague
Contact:

Re: issues with permissions

Post by alexus »

Which one is the parent?
May be you have some specific ACL or custom for Parent/child tickets?
Alexey Yusov

Production: OTRS CE ITSM 6.0.28 on CentOS 7 + Apache 2.4 + MariaDB 10.4.13 + Radiant Customer Portal

Radiant System OTRS Intergrator
RS4OTRS marketplace
Stay tuned on our Facebook
((OTRS)) Community Edition - what next?
wurzel
Znuny guru
Posts: 3232
Joined: 08 Jul 2010, 22:25
Znuny Version: x.x.x
Real Name: Florian

Re: issues with permissions

Post by wurzel »

Hi,

maybe it is >200 articles the reason? :shock:
There is also a Ticket ACL in sysconfig for parent/child. Maybe you can check this?

Flo
OTRS 8 SILVER (Prod)
OTRS 8 auf Debian 11 (Test)
Znuny 7.x latest version testing auf Debian 11

-- Ich beantworte keine Forums-Fragen PN - No PN please

I won't answer to unfriendly users any more. A greeting and regards are just polite.
rvaldomir
Znuny expert
Posts: 155
Joined: 04 Aug 2014, 23:59
Znuny Version: 3.3.8
Real Name: Roberto A. Valdomir

Re: issues with permissions

Post by rvaldomir »

Hi Flo,

Yes, I just realized that the parent has 326 articles. What is the issue with that? :o

In sysconfig you are pointing to this ACL? it is currently active, because we use this restriction.

Ticket::Acl::Module###1-Ticket::Acl::Module
​Roberto A. Valdomir
Mobile: (+598) 93 868 147 | Skype: roberto.a.valdomir
@roberto.valdomir | re.vu/robertovaldomir

----------------------------------------------------------------------------------------
OTRS 3.3.8 | RHEL 6 x64 | Oracle 11g | Custom Development by OTRS365
wurzel
Znuny guru
Posts: 3232
Joined: 08 Jul 2010, 22:25
Znuny Version: x.x.x
Real Name: Florian

Re: issues with permissions

Post by wurzel »

Hi,
rvaldomir wrote: Yes, I just realized that the parent has 326 articles. What is the issue with that? :o
This should not be a issue. This was a "maybe" question.
rvaldomir wrote: In sysconfig you are pointing to this ACL? it is currently active, because we use this restriction.
Ticket::Acl::Module###1-Ticket::Acl::Module
Yes, I meant this.
What if you disable it?

Florian
OTRS 8 SILVER (Prod)
OTRS 8 auf Debian 11 (Test)
Znuny 7.x latest version testing auf Debian 11

-- Ich beantworte keine Forums-Fragen PN - No PN please

I won't answer to unfriendly users any more. A greeting and regards are just polite.
Post Reply