(SOLVED) ACLs not working since 3.2

[bayerex]

Hi all,

Since my upgrade to 3.2.7 from 3.1.6 I can't get my ACLs to work. I want to filter DynamicField_Subproduct based on what queue is selected.

I've read UPGRADING and the manual but it's still not working. Please tell me if I have done something wrong.

Many thanks

Code: Select all

    1 => 'Explorer',
    2 => 'Internet',

##### Reduce available DynamicField_Subproduct values to just "Explorer" when 'Blackboard' queue is selected
$Self->{TicketAcl}->{'Limit Subproduct entries'} = {
   Properties => {
   Queue => {
       Name => ['Blackboard'],
        }
   },

   Possible => {
        Ticket => {
    DynamicField_Subproduct  => ['1'],
        },
   },
};

##### Reduce available DynamicField_Subproduct values to just "Internet" when 'Hardware' queue is selected
$Self->{TicketAcl}->{'Limit Subproduct entries'} = {
   Properties => {
   Queue => {
       Name => ['Hardware'],
        }
   },

   Possible => {
        Ticket => {
    DynamicField_Subproduct  => ['2'],
        },
   },
};

[crythias]

in 3.2, there was a change from key to value, I think..

[bayerex]

in 3.2, there was a change from key to value, I think..

I'm not quite sure what you mean by that. Could you expand on that a bit please?

[crythias]

assuming there is a key => value and you were looking for 1 => name or name => 1, it's likely reversed.

I wish this was clearer.

[wurzel]

Hi,

in upgrading there is a description of the ACL changes.

Florian

[bayerex]

Hi,

in upgrading there is a description of the ACL changes.

Florian

I hope from my code example and initial description it is clear I have already read it

[bayerex]

assuming there is a key => value and you were looking for 1 => name or name => 1, it's likely reversed.

I wish this was clearer.

Yeah I do too, because I've now tried it both ways and it's still not working

Code: Select all

     'Explorer' => 1,
     'Internet' => 2,

##### Reduce DynamicField_Subproduct values to the 'CONFIRE Blackboard' queue 
$Self->{TicketAcl}->{'Limit Subproduct entries'} = { 
   Properties => { 
   Queue => {
       Name => ['CONFIRE Blackboard'],
        } 
   }, 
 
   Possible => { 
        Ticket => {                         
    DynamicField_Subproduct  => ['1'], 
        }, 
   }, 
};

[firebolt]

Hi! I want to confirm that ACLs really don't work. My config have no change in new version, I compared it with example in 3.2 documentation and found there is no difference. But ACLs just don't work.

Code: Select all

# ticket acl
$Self->{TicketAcl}->{'101-Remove-Close-Button'} = {
    # match properties
    Properties => {
        # current ticket match properties
        Ticket => {
            Queue => ['Дежурный общий', 'Дежурный 1С', 'Дежурный billing', 'Дежурный КУ'],
        }
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
            State => ['new', 'open', 'назначено', 'в работе', 'выполнено', 'ожидаем'],
        },
        # possible action options
        Action => {
            AgentTicketBounce        => 1,
            AgentTicketClose         => 0,
            AgentTicketCompose       => 1,
            AgentTicketCustomer      => 1,
            AgentTicketForward       => 1,
            AgentTicketFreeText      => 1,
            AgentTicketHistory       => 1,
            AgentTicketLink          => 1,
            AgentTicketLock          => 1,
            AgentTicketMerge         => 1,
            AgentTicketMove          => 1,
            AgentTicketNote          => 1,
            AgentTicketOwner         => 1,
            AgentTicketPending       => 1,
            AgentTicketPhone         => 1, # only used to hide the Split action
            AgentTicketPhoneInbound  => 0,
            AgentTicketPhoneOutbound => 0,
            AgentTicketPrint         => 1,
            AgentTicketPriority      => 1,
            AgentTicketResponsible   => 1,
            AgentTicketWatcher       => 1,
            AgentTicketZoom          => 1,
            AgentLinkObject          => 1, # only used to hide the Link action
        },
    },
};

[bayerex]

Hi! I want to confirm that ACLs really don't work. My config have no change in new version, I compared it with example in 3.2 documentation and found there is no difference. But ACLs just don't work.

Thank you for confirming the same experience. This is a real show-stopper for us. I cannot migrate 100s of users/customers to a new OTRS if ACLs are not working!

Any solution for this please?

[firebolt]

Any solution for this please?

I'm going to upgrade 3.1.10 with disabled ACLs and then turn it on when the upgrading will be completed.

[firebolt]

I'm sorry. My ACLs didn't work because of my mistake Now all is OK.

[bayerex]

This is my latest ACL of which the problem is when I select the "Magellan" queue, no values are displayed in my Subproduct dropdown. I'd be very grateful if anyone can tell me if I've done something wrong. Checked Apache and OTRS logs already, there's nothing relevant in there.

Code: Select all

     1 => 'Explorer',
     2 => 'Internet',

##### Reduce DynamicField_Subproduct values to the 'Magellan' queue
$Self->{TicketAcl}->{'Limit Subproduct entries'} = {
   Properties => {
     Queue => {
       Name => ['Magellan'],
        }
   },

   Possible => {
     Ticket => {
       DynamicField_Subproduct  => ['1','2'],
        }
   }
};

[bayerex]

I must also apologise. I misread the Upgrading doc and made an unnecessary key definition above my ACLs. I understand better now!

[firebolt]

I must also apologise. I misread the Upgrading doc and made an unnecessary key definition above my ACLs. I understand better now!

Good for you!