Unprivileged users has right to fill out custom fields

RT Users
1

This applies to RT 3.4.2.

When an unprivileged user creates a new ticket using RT’s web interface,
(s)he gets access to fill out all custom fields for the selected queue.

The problem is that an uprivileged user does not have access to fill out
these fields with information (when creating ticket, RT will discard them
anyway with error messages). In that case, those custom fields should not
be visualized for the user.

Is this a minor bug or something?

Tomas A. P. Olaj, email: tomas.olaj@usit.uio.no, web: folk.uio.no/tomaso
University of Oslo / USIT (Center for Information Technology Services)
System- and Application Management / Applications Management Group

2

This applies to RT 3.4.2.

When an unprivileged user creates a new ticket using RT’s web interface,
(s)he gets access to fill out all custom fields for the selected queue.

The problem is that an uprivileged user does not have access to fill out
these fields with information (when creating ticket, RT will discard them
anyway with error messages). In that case, those custom fields should not
be visualized for the user.

Is this a minor bug or something?

I think we’ve been handed a patch to fix that recently.