There are certain fields we would want our internal employees to be able
to update but our external customers we don't want to update. I don't
want an external to update the status of an issue, however when you
bring up the details that is there. I probably wouldn't even want them
seeing the time-tracking stuff. Would it be easier to setup two sites
that were linked to the same db? So our internal site would have
everything but our external site would be limited in what was visible
etc? I'm just looking for suggestions on how to handle this.