[rt-users] User can see other people tickets

[Gavin Henry]

Dear List,

I have granted the CreateTicket and SeeQueue to the group everyone in a 
particular queue.

I have also let a certain user login by giving them a password.

Now when I log in as them, I can see all the tickets that they have created, 
they can reply to their own tickets and create a new one.

This is perfect and what I would expect.

However, if they put in a ticket number that is not their own, in the Go To 
box, they can see that ticket (which is in the same queue).

Should they be able to see a ticket that is not their own?

Should I just create a new queue specifically for them i.e:

their-company-support

And handle it that way?

I would have thought that you should only be able to select a ticket that you 
created, no?

Thanks,

Gavin.

-- 
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 742001
E ghenry at suretecsystems.com

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20050716/78f61c0c/attachment.sig>