Bug in 3.6.3 At A Glance saved search display

Hi,

Here’s an example:

I create a saved search which will display tickets created in the last
week. For me (who can see all queues) I see 10 results (the last 10
tickets created).

However another user might only have permission to see 1 queue.
Instead of seeing the last 10 tickets created in their queue they only
seem to see whichever of the last 10 are in their queue, so they might
only see 1 or 2 tickets, which is fairly misleading.

I guess it’s picking the last 10 from the resultset and THEN applying
what you can view, which to me seems wrong. It should work out what
the user can see, then show the last 10.

Does anyone know if this can be fixed, or if it is fixed in 3.8?

Thanks,

Justin

Justin Hayes
Orbis Support Manager
justin.hayes@orbisuk.com

I create a saved search which will display tickets created in the last
week. For me (who can see all queues) I see 10 results (the last 10
tickets created).

However another user might only have permission to see 1 queue.
Instead of seeing the last 10 tickets created in their queue they only
seem to see whichever of the last 10 are in their queue, so they might
only see 1 or 2 tickets, which is fairly misleading.

I guess it’s picking the last 10 from the resultset and THEN applying
what you can view, which to me seems wrong. It should work out what
the user can see, then show the last 10.

Does anyone know if this can be fixed, or if it is fixed in 3.8?

There is an option for this in 3.8 that isn’t enabled by default.
You want the config option UseSQLForACLChecks

-kevin

Many thanks Kevin. Does it have any other effects? Just trying to
understand why it’s off by default.

Looks like another reason to work on the upgrade.

Cheers,

JustinOn 11 May 2009, at 15:20, Kevin Falcone wrote:

On May 11, 2009, at 2:36 AM, Justin Hayes wrote:

I create a saved search which will display tickets created in the
last
week. For me (who can see all queues) I see 10 results (the last 10
tickets created).

However another user might only have permission to see 1 queue.
Instead of seeing the last 10 tickets created in their queue they
only
seem to see whichever of the last 10 are in their queue, so they
might
only see 1 or 2 tickets, which is fairly misleading.

I guess it’s picking the last 10 from the resultset and THEN applying
what you can view, which to me seems wrong. It should work out what
the user can see, then show the last 10.

Does anyone know if this can be fixed, or if it is fixed in 3.8?

There is an option for this in 3.8 that isn’t enabled by default.
You want the config option UseSQLForACLChecks

-kevin


http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Justin Hayes
Orbis Support Manager
justin.hayes@orbisuk.com

Many thanks Kevin. Does it have any other effects? Just trying to
understand why it’s off by default.
Looks like another reason to work on the upgrade.

It is documented in the config file, but the summary is that we’re not
convinced
it works in every case (this is a really complex query).

-kevin> On 11 May 2009, at 15:20, Kevin Falcone wrote:

On May 11, 2009, at 2:36 AM, Justin Hayes wrote:

I create a saved search which will display tickets created in the
last
week. For me (who can see all queues) I see 10 results (the last 10
tickets created).

However another user might only have permission to see 1 queue.
Instead of seeing the last 10 tickets created in their queue they
only
seem to see whichever of the last 10 are in their queue, so they
might
only see 1 or 2 tickets, which is fairly misleading.

I guess it’s picking the last 10 from the resultset and THEN
applying
what you can view, which to me seems wrong. It should work out what
the user can see, then show the last 10.

Does anyone know if this can be fixed, or if it is fixed in 3.8?

There is an option for this in 3.8 that isn’t enabled by default.
You want the config option UseSQLForACLChecks

-kevin


http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com


Justin Hayes
Orbis Support Manager
justin.hayes@orbisuk.com

Ok many thanks Kevin. I’m hoping to set up a 3.8 test environment so
I’ll have a play around with that setting on there.

JustinOn 11 May 2009, at 18:02, Kevin Falcone wrote:

On May 11, 2009, at 12:50 PM, Justin Hayes wrote:

Many thanks Kevin. Does it have any other effects? Just trying to
understand why it’s off by default.
Looks like another reason to work on the upgrade.

It is documented in the config file, but the summary is that we’re not
convinced
it works in every case (this is a really complex query).

-kevin

On 11 May 2009, at 15:20, Kevin Falcone wrote:

On May 11, 2009, at 2:36 AM, Justin Hayes wrote:

I create a saved search which will display tickets created in the
last
week. For me (who can see all queues) I see 10 results (the last 10
tickets created).

However another user might only have permission to see 1 queue.
Instead of seeing the last 10 tickets created in their queue they
only
seem to see whichever of the last 10 are in their queue, so they
might
only see 1 or 2 tickets, which is fairly misleading.

I guess it’s picking the last 10 from the resultset and THEN
applying
what you can view, which to me seems wrong. It should work out what
the user can see, then show the last 10.

Does anyone know if this can be fixed, or if it is fixed in 3.8?

There is an option for this in 3.8 that isn’t enabled by default.
You want the config option UseSQLForACLChecks

-kevin


http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com


Justin Hayes
Orbis Support Manager
justin.hayes@orbisuk.com


http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Justin Hayes
Orbis Support Manager
justin.hayes@orbisuk.com