How do I / How should I - Use templates

[Sheep]

Greetings,

as there seems to be a security hole using template as a way to restrict ressources to only some users,
(reference to Possible Major Security Issue Here !!!! )
my question is: "Should templates be used for this purpose"

The manual (page 361) referers to template as a way to have

completely different “style”

but also

a completely different support desk – with a different style, knowledgebase categories, troubleshooter categories, news announcements, departments and company name.

As the second quote suggests, that's what i'm trying to do ("different categories").

Thx,
Antoine

[richm]

Hi Antoine,

Did you ever sort this out?

I think I'm trying to do similar to what you were after, but haven't been able to make it work.

Are there any key things to look for here?
Any "gotchas?"

Something I'm puzzled about:

A bit of background for reference:
Our clients (we deal with a number of different companies) are setup such that a user group (in staff cp) equals a unique company, and the users for that company are all added under that group. Each user also has to be a "manager" in order to see all of their companies tickets, and each user group (ie. "company") can't be allowed to see the tickets of any other user group (another company)

So on to the puzzler:
I've created a second template group for implementation clients in the admin CP. Selected the proper default department and other settings. Within the template groups settings, the "Registered User Group" is confusing me a bit, in that it appears I will have to create a unique template group for every new client we bring on board??

Any insights would be appreciated!

Rich

[Sheep]

Woooo, old topic


The first solution i found out was exactly what you are describing, a template for each usergroup... kinda scary!

My final solution for this is .... SERM, my module for enhanced right. take a look in the Modification and Addons forum.

[richm]

Thanks Antoine! I was going to wait to implement SERM until after next stable build, but the thought of having to create a separate template group for every client (and add my mods to every one of them??!!!??? ...ahhh!!!) is just too much.

Rich