IsGroup

Returns true if this principal is a group. Returns undef, otherwise

IsUser

Returns true if this principal is a User. Returns undef, otherwise

Object

Returns the user or group associated with this principal

GrantRight { Right => RIGHTNAME, Object => undef }

A helper function which calls RT::ACE->Create

RevokeRight { Right => "RightName", Object => "object" }

Delete a right that a user has

sub HasRight (Right => 'right' Object => undef)

Checks to see whether this principal has the right "Right" for the Object specified. If the Object parameter is omitted, checks to see whether the user has the right globally.

This still hard codes to check to see if a user has queue-level rights if we ask about a specific ticket.

This takes the params: 

    Right => name of a right
    And either:
    Object => an RT style object (->id will get its id)

Returns 1 if a matching ACE was found.

Returns undef if no ACE was found.

_RolesForObject( $object_type, $object_id)

Returns an SQL clause finding role groups for Objects

_ACLCache

# Function: _ACLCache # Type : private instance # Args : none # Lvalue : hash: ACLCache # Desc : Returns a reference to the Key cache hash

_InvalidateACLCache

Cleans out and reinitializes the user rights key cache

_GetPrincipalTypeForACL

Gets the principal type. if it's a user, it's a user. if it's a role group and it has a Type, return that. if it has no type, return group.

_ReferenceId

Returns a list uniquely representing an object or normal scalar.

For scalars, its string value is returned; for objects that has an id() method, its class name and Id are returned as a string seperated by a "-".