Class SystemSupportScopes
System-level scope constants for support cases that belong to no team.
public static class SystemSupportScopes
- Inheritance
-
SystemSupportScopes
- Inherited Members
Remarks
These exist because support:read cannot govern an unassigned case. That is a team scope, and
a case with no team has nothing to hold it against — so a case nobody has assigned would otherwise be
readable by nobody, which is the same as losing it.
Deliberately separate from the team scopes rather than a widening of them. Holding
support:read on one team must never confer sight of unassigned cases, which may concern any tenant
or none: that would let a member of the smallest team read everything that arrived by mail. Granting
these is a decision about the whole product, which is what a system scope is for.
Fields
Manage
Reply to, close, reopen and assign a case that belongs to no team.
public const string Manage = "support:unassigned:manage"
Field Value
Remarks
Assignment is the operation that matters here: it decides which tenant a case and its whole transcript become part of, so it is granted with answering rather than with reading.
Read
Read support cases that belong to no team, and list them.
public const string Read = "support:unassigned:read"
Field Value
Remarks
The same privilege boundary as support:read and for the same reason — a case holds whatever
somebody typed into it — but across the cases no team owns.