
On Tue, May 10, 2011 at 2:12 PM, Marius Vaitiekunas
On Tue, May 10, 2011 at 1:44 PM, Nils Leideck
wrote: On 10.05.2011, at 12:13, Marius Vaitiekunas wrote:
Some of our agents have read only permissions in CMDB classes. So, they can not link ticket to CI from these CMDB classes, where permissions are read only. How can I let them to link CI without giving rw permissions? I was looking to source code, but did not found, where to change it.
Usually you do not need more permisssions than ro for generating a link between two objects. Are you sure that they have ro permissions on the correct CI groups?
Cheers, Nils
Yes, I am sure. There are steps, how to get a situation: 1. Create some agents group, for example "class1_readers". 2. Create some CMDB class via Generic catalog, for example class1. 3. Create some CI in CMDB class1 4. Assign Roles <> Groups (give ro class1_readers) and Agents <> Roles. 5. Create a ticket. 6. Try to link this ticket with CI form class1 with ro permissions via agent ticket zoom interface. You will not get a select option of class1.
Any update, Nils? You do not need even to create new groups and CMDB classses. Just put ro tag on itsm-configitem and agent will not be able to link ticket to any cmdb class via link interface..