Reminders assume you have CreateTicket right

RT Developers
1

Reminders::Add assumes you have CreateTicket for the queue of
the ticket the reminder is being attched to. The method does
not check the return of Ticket::Create and ends up generating
a bad transaction (which causes further problems to be discussed
later).

How should this be resolved?

  • Checking the return from Create obviously

but also,

  • Have a queue where anyone can create reminders?

  • Allow the selecting of a queue the user has CreateTicket
    rights on?

  • Don’t show the reminders form if the user doesn’t have
    CreateTicket on the queue?

Please advise.

-Todd

2

Reminders::Add assumes you have CreateTicket for the queue of
the ticket the reminder is being attched to. The method does
not check the return of Ticket::Create and ends up generating
a bad transaction (which causes further problems to be discussed
later).

How should this be resolved?

  • Checking the return from Create obviously

Yes.

but also,

  • Have a queue where anyone can create reminders?

This leads to weird data hiding or leakage issues.

  • Allow the selecting of a queue the user has CreateTicket
    rights on?

  • Don’t show the reminders form if the user doesn’t have
    CreateTicket on the queue?

This seems the most sane answer to me