Hello
We have a problem, non-privileged users (final users) can see any
ticket simply modifying the URL (replacing the ticket number).
How can we avoid this?
Thanks
Pablo Povarchik de Carrasquedo
Quality Colocation and Dedicated Servers services
Colocation facilities include Fremont California,
London UK and Trento Italy
±- FuturaHost.Com (AS39317) - Industrial & Business Class ISP --+
| Web Hosting - Dedicated Servers - Colocation
| info@futurahost.com - http://futurahost.com/ - (+39) 0461 592710
| Get a high quality full cabinet with 5Mbps full burst included
| for only €700/month, availability also in London
You’ce likely granted the “See Ticket” privilege to a system or ticket role. Check your rights assignments in those areas.
Michael Eraña, CISSP
CTO
PC Network, Inc.
eranam@lanusa.com
|=> -----Original Message-----
|=> From: rt-users-bounces@lists.bestpractical.com
|=> [mailto:rt-users-bounces@lists.bestpractical.com] On Behalf
|=> Of Pablo Povarchik - FuturaHost.Com
|=> Sent: Tuesday, April 18, 2006 5:41 AM
|=> To: rt-users@lists.bestpractical.com
|=> Subject: [rt-users] permission problem users can see others tickets
|=>
|=>
|=> Hello
|=>
|=> We have a problem, non-privileged users (final users)
|=> can see any ticket simply modifying the URL (replacing the
|=> ticket number).
|=>
|=> How can we avoid this?
|=>
|=> Thanks
<< Snippage >>