<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1491" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=366553916-28032005><FONT face=Arial size=2>OK, so one of my
co-workers just noticed that people are seeing tickets from queues they don't
have access too being listed in the "10 newest unowned tickets..." window.
But here's the kinda weird bit: there is nothing under the "Queue" column for
the tickets in the queues these people don't have access to. When I look
(I have access to see all queues) I see all the queue names. So, to recap,
Everyone sees all the tickets listed in that window. If you have access to
a queue, you see its name listed, otherwise just blank space. This is very
dangerous, because anyone can click on any of those links to view the contents
of those tickets,a nd they an even TAKE the ticket.</FONT></SPAN></DIV>
<DIV><SPAN class=366553916-28032005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=366553916-28032005><FONT face=Arial size=2>This whole bit only
recently came to happen (right after we upgraded from 3.0.1 to 3.4.2). Any
ideas as to how this happened?</FONT></SPAN></DIV>
<DIV><SPAN class=366553916-28032005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=366553916-28032005><FONT face=Arial
size=2>Thanks.</FONT></SPAN></DIV>
<DIV><SPAN class=366553916-28032005><FONT face=Arial
size=2>--Alex</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV><!-- Converted from text/rtf format -->
<P><SPAN lang=en-us><FONT face="Courier New" size=2>Alex
Brelsfoard</FONT></SPAN> <BR><SPAN lang=en-us><FONT face="Courier New"
size=2>Web Applications Developer</FONT></SPAN> <BR><SPAN lang=en-us><FONT
face="Courier New" size=2>Web Development Office</FONT></SPAN> <BR><SPAN
lang=en-us><FONT face="Courier New" size=2>Worcester Polytechnic
Institute</FONT></SPAN> <BR><SPAN lang=en-us><FONT face="Courier New"
size=2>508-831-6147</FONT></SPAN> <BR><SPAN lang=en-us><FONT face="Courier New"
size=2>alexb@wpi.edu</FONT></SPAN> </P>
<DIV> </DIV></BODY></HTML>