This may also work, however will be more of an up-front and ongoing procedure.

All my queues are in the users group, which everyone is a member of by default. 
So this basically equates to me having to go in and add a customer into a group 
for newly created users(either for the ones that aren't given access or the 
ones who do have access). I realize that I can change the group each customer 
is a member of by default, and then change each queue, but there is the ongoing 
maintenance here either way.
The ACL approach does not involve any changes or ongoing maintenance. Its nice 
because it automatically limits queues by an active directory attribute. Is not 
really who we want to limit, its what we want to limit certain people to have 
access to.

So the question remains, what is the argument limit...

Thanks for all the responses thusfar.

-Isaac

From: otrs-boun...@otrs.org [mailto:otrs-boun...@otrs.org] On Behalf Of Gerald 
Young
Sent: Wednesday, November 14, 2012 3:48 PM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] TicketAcl, UserCustomerID argument limit

IG: I do have multiple queues to one group and certain customers should not 
access all the queues from that group
then split the queue-groups and apply the extra group to those who should have 
access.

On Wed, Nov 14, 2012 at 6:30 PM, Isaac Gonzalez 
<igonza...@autoreturn.com<mailto:igonza...@autoreturn.com>> wrote:
I do have multiple queues to one group and certain customers should not access 
all the queues from that group. I did a bunch of research before I implemented 
this solution, and it turned out to be the correct one. It would really be 
helpful to know about a set limit.

Thanks,
Isaac

From: otrs-boun...@otrs.org<mailto:otrs-boun...@otrs.org> 
[mailto:otrs-boun...@otrs.org<mailto:otrs-boun...@otrs.org>] On Behalf Of 
Alvaro Cordero
Sent: Wednesday, November 14, 2012 3:16 PM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] TicketAcl, UserCustomerID argument limit

Hello Isaac,

I believe the best approach to what you are looking for is the Customer <-> 
Group Config in the Admin Interface, unless you have multiple queues to one 
group and then your customer shouldn't access all the queues from that group. 
This is slow to be done the first time, but then is becomes just a maintenance 
thing.

Regards
2012/11/14 Isaac Gonzalez 
<igonza...@autoreturn.com<mailto:igonza...@autoreturn.com>>
Hi I am using the Ticket ACL here: http://doc.otrs.org/3.1/en/html/ch18s03.html 
  to limit which queues certain customers can see by checking their customer 
id. This works nicely, but now I want to add a lot more customer id values....

Does the UserCustomerID Parameter below have any limitation in the values you 
can pass to it? I was hoping to list around 50-100 customer id's without 
hindering performance. These customerid's are pulled from Active Directory by 
the way. See below example of my config.

Example of my config:

$Self->{TicketAcl}->{'Limit queue selection for customers'} = {

# match properties

Properties => {

# current action match properties

   CustomerUser => {

     UserCustomerID => ['value1','value2','value3'....'valuen'],

   },

},

# return possible options (white list)

Possible => {

# possible ticket options (white list)

    Ticket => {

      Queue => ['queue1','queue2 '],

    },

},

};



Thanks,
Isaac

---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs



--
___________________________
Alvaro Cordero Retana
Consultor de Tecnologias
Gridshield Monitoreo de Redes e
Infraestructura.
2258-5757 ext 123
alv...@gridshield.net<mailto:alv...@gridshield.net>
www.gridshield.net<http://www.gridshield.net>

---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Reply via email to