Hi,
Does a user can see ticket which he is not the requestor when they do
a go ticket in the SelfService ?
Or how to configure ACL to avoid this .
Philippe.
Philippe Van Hecke
NETWORK ENGINEER
BELNET
Rue de la Science, 4
B-1000 Brussels
Belgium
Tel: +32 (0) 27903333
Fax: +32 (0) 27903335
Philippe Van Hecke wrote:
Hi,
Does a user can see ticket which he is not the requestor when they do
a go ticket in the SelfService ?
Yes. You are right. He could go to any Ticket id and see it content if
he has right ShowTicket.
Or how to configure ACL to avoid this .
So you have to grant only Requestor-Role with ShowTicket right.