[SOLVED] How can I use access control lists(ACLs) on dynamic fields?

smuwanga · Post by **smuwanga** » 31 May 2015, 13:10

Hello guys,

I have two dynamic fields, continent and country. On selecting a continent, its respective countries should show. However, the list of countries in my drop-down remains unchanged. What could I be doing wrong?

Here are my ACLs from Config.pm.

Code: Select all

#------------------ACLs----------------------------#
$Self->{TicketAcl}->{'100-continent-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
        Ticket => {
            DynamicField_continent => ['Africa'],
        }
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['Kenya','Uganda','South Africa'],
        },
    },
};
$Self->{TicketAcl}->{'101-continent-north-america-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
        Ticket => {
            DynamicField_continent => ['North America'],
        }
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['Canada','United States of America'],
        },
    },
};

$Self->{TicketAcl}->{'102-continent-Europe-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
        Ticket => {
            DynamicField_continent => ['Europe'],
        }
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['France'],
        },
    },
};
#------------end ACLs here-------------------------#

Thanking you,
Simon.

RStraub · Post by **RStraub** » 01 Jun 2015, 08:25

This works in OTRS 4.x

You are still using 3.1 ?

smuwanga · Post by **smuwanga** » 01 Jun 2015, 08:33

Thanks Rstraub.

Am still using 3.1.x . Am going to upgrade to test it out.

smuwanga · Post by **smuwanga** » 01 Jun 2015, 17:05

Many thanks.
I have installed 4.0.8. It works fine.

Here are the ACLs.

Code: Select all

$Self->{TicketAcl}->{'100-continent-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
       Frontend => {
            Action => ['AgentTicketEmail'],
        },
       DynamicField => {
            DynamicField_continent  => ['africa'],
            
        },
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['kenya','uganda'],
        },
    },
};
$Self->{TicketAcl}->{'101-continent-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
       Frontend => {
            Action => ['AgentTicketEmail'],
        },
       DynamicField => {
            DynamicField_continent  => ['north_america'],
            
        },
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['canada','united_states_of_america'],
        },
    },
};

Notes:
-Use keys in the [] instead of values.
-don't use the root@localhost account

Smiith · Post by **Smiith** » 22 Jul 2015, 10:56

Hello !

Can you help me please, i'm newbie.
After editing the file Config.pm, i will find the fields automatically added in the ticket plateform ? or i must add dynamic fields ?

Thanks

smuwanga · Post by **smuwanga** » 22 Jul 2015, 12:36

Hello,

You will have to add the fields onto the AgentTicketEmail through SysConfig.
The topic Showing a Dynamic Field on a Screen at https://otrs.github.io/doc/manual/admin ... figuration shows how to display the fields on the screen. Thereafter, you can test how your ACL works. Let me know how it goes.

Smiith · Post by **Smiith** » 22 Jul 2015, 13:59

smuwanga wrote:Hello,

You will have to add the fields onto the AgentTicketEmail through SysConfig.
The topic Showing a Dynamic Field on a Screen at https://otrs.github.io/doc/manual/admin ... figuration shows how to display the fields on the screen. Thereafter, you can test how your ACL works. Let me know how it goes.

So you mean that first i must edit the Config.pm then add the fields in AgentTicketEmail through Sysconfig ?
What is the Key of the field in this example ? is it "DynamicField_continent" and "DynamicField_country" the Keys ?
I don't add them in the Dynamic Fields in Admin Menu ? i don't touch the Dynamic Fields in Admin Menu at all ?

jojo · Post by **jojo** » 22 Jul 2015, 14:19

ACLs need to be done in ACL Editor.

Smiith · Post by **Smiith** » 22 Jul 2015, 14:23

jojo wrote:ACLs need to be done in ACL Editor.

Can you tell me what to do exactly please ? i'm newbie

jojo · Post by **jojo** » 22 Jul 2015, 14:29

Read the admin manual, check examples in ACL Editor in Admin Tab.

If you need commercial support, contact sales@otrs.com

Smiith · Post by **Smiith** » 23 Jul 2015, 09:38

is that what it look like when i use ACL editor ? can someone help me or correct me please ?

RStraub · Post by **RStraub** » 23 Jul 2015, 09:41

What is your version? When I select "DynamicField" I get a dropdown and not a freetext.

I'd guess that you have to type there "NameOfYourField" and NOT "DynamicField_NameOfYourField" (atleast in the filter).

Smiith · Post by **Smiith** » 23 Jul 2015, 10:07

RStraub wrote:What is your version? When I select "DynamicField" I get a dropdown and not a freetext.

I'd guess that you have to type there "NameOfYourField" and NOT "DynamicField_NameOfYourField" (atleast in the filter).

it's OTRS 4.
I'm following the previous example of ACL about continent and country.

$Self->{TicketAcl}->{'100-continent-ACL'} = {
# match properties
Properties => {
# current ticket match properties
Frontend => {
Action => ['AgentTicketEmail'],
},
DynamicField => {
DynamicField_continent => ['africa'],

},
},
# return possible options (white list)
Possible => {
# possible ticket options (white list)
Ticket => {
DynamicField_country => ['kenya','uganda'],
},
},
};

If you talk about the DynamicField_continent it's a Dropdown i just chose "continent" and it written automatically DynamicField_continent
But if you talk about "DynamicField_country" yeah it's a Freetext, i wrote like DynamicField_continent, should i just write "continent" ?

RStraub · Post by **RStraub** » 23 Jul 2015, 10:27

No, it should be correct then.

And you can still select all values?
Make sure the ACL is deployed and that you are not using the root user (ACL don't apply for him).

Smiith · Post by **Smiith** » 23 Jul 2015, 11:03

RStraub wrote:No, it should be correct then.

And you can still select all values?
Make sure the ACL is deployed and that you are not using the root user (ACL don't apply for him).

what values ? sorry i did not understand what do you mean
ACL is deployed and i'm using another agent Admin, not the root i guess
Here what i did step by step:
1) first i created the Dynamic Fields

dynamic fields.png

2) then i configured the Frontend::Agent::Ticket::ViewEmailNew in SysConfig to be displayed in the New Email Ticket

sysconfig.png

3) finally i create the ACL like the previous photo
Did i made something wrong ? because the New Email Ticket still not displayed what i want. Still displayed All Countries when i chose North America like a Continent

new email ticket.png

Any help please ?

RStraub · Post by **RStraub** » 23 Jul 2015, 11:04

In your ACL your filter says action=AgentTicketEmailOutbound but when you create a new ticket the action "AgentTicketEmail".

So try removing the Outbound from the ACL filter and re-deploy.

Smiith · Post by **Smiith** » 23 Jul 2015, 11:28

RStraub wrote:In your ACL your filter says action=AgentTicketEmailOutbound but when you create a new ticket the action "AgentTicketEmail".

So try removing the Outbound from the ACL filter and re-deploy.

i tried but in Create New Email Ticket when i select a Continent it disappear suddenly
Country still display all the Countries

RStraub · Post by **RStraub** » 23 Jul 2015, 11:41

At least you know now that the ACL does something

As "Possible" is a whitelist (everything else is forbidden) you might want to add to your ACL:
Under Possible -> Ticket add:
DynamicField_continent
-> [regexp] .*

Smiith · Post by **Smiith** » 23 Jul 2015, 11:48

At least you know now that the ACL does something

hahaha yeah

it worked finally

i think because of the change AgentTicketEmailOutbound to AgentTicketEmail
thank you very much everybody and especially RStraub

Nasirengg786 · Post by **Nasirengg786** » 08 Feb 2016, 09:52

smuwanga wrote:Hello guys,

I have two dynamic fields, continent and country. On selecting a continent, its respective countries should show. However, the list of countries in my drop-down remains unchanged. What could I be doing wrong?

Here are my ACLs from Config.pm.

Code: Select all

#------------------ACLs----------------------------#
$Self->{TicketAcl}->{'100-continent-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
        Ticket => {
            DynamicField_continent => ['Africa'],
        }
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['Kenya','Uganda','South Africa'],
        },
    },
};
$Self->{TicketAcl}->{'101-continent-north-america-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
        Ticket => {
            DynamicField_continent => ['North America'],
        }
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['Canada','United States of America'],
        },
    },
};

$Self->{TicketAcl}->{'102-continent-Europe-ACL'} = {
    # match properties
    Properties => {
        # current ticket match properties
        Ticket => {
            DynamicField_continent => ['Europe'],
        }
    },
    # return possible options (white list)
    Possible => {
        # possible ticket options (white list)
        Ticket => {
           DynamicField_country => ['France'],
        },
    },
};
#------------end ACLs here-------------------------#

Thanking you,
Simon.

PLEASE HELP - WHERE TO DO THE CHANGES IN SYSTEM TO IMPLEMENT THIS -I AM UNABLE TO GET- WHEN I CHANGE CONFIG.PM - I M GETTING ENCOUNTER ERROR(MISCONFIGURATION) - PLEASE HELP - THANKS

Nasirengg786 · Post by **Nasirengg786** » 08 Feb 2016, 11:01

RStraub wrote:At least you know now that the ACL does something

As "Possible" is a whitelist (everything else is forbidden) you might want to add to your ACL:
Under Possible -> Ticket add:
DynamicField_continent
-> [regexp] .*

PLEASE HELP - WHERE TO DO THE CHANGES IN SYSTEM TO IMPLEMENT THIS -I AM UNABLE TO GET- WHEN I CHANGE CONFIG.PM - I M GETTING ENCOUNTER ERROR(MISCONFIGURATION) - PLEASE HELP - THANKS

reneeb · Post by **reneeb** » 08 Feb 2016, 12:00

YOU SHOULDN'T SCREAM AT US

Can you post the exact error message?

Znuny Open Source Ticketsystem

[SOLVED] How can I use access control lists(ACLs) on dynamic fields?

[SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: How can I use access control lists(ACLs) on dynamic fields?

Re: How can I use access control lists(ACLs) on dynamic fields?

Re: How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?

Re: [SOLVED] How can I use access control lists(ACLs) on dynamic fields?