<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=windows-1250"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Michael,<br>
<br>
Try giving the role "Requestor" the following rights; see queue,
see ticket, see outgoing e_mail, reply to ticket and watch. That way
they can find their tickets in the queue and interact about thos
tickets only as the "requestor".<br>
<br>
Kenn<br>
<br>
Michael Shanks wrote:
<blockquote
cite="mid20060318083524.7E6414D806A@diesel.bestpractical.com"
type="cite">
<pre wrap="">Hello
If I remove this right it corrects the problem, however my user now cannot
see his open or closed tickets also
-----Original Message-----
From: Jesse Vincent [<a class="moz-txt-link-freetext" href="mailto:jesse@bestpractical.com">mailto:jesse@bestpractical.com</a>]
Sent: 18 March 2006 03:23
To: Michael Shanks
Cc: <a class="moz-txt-link-abbreviated" href="mailto:rt-users@lists.bestpractical.com">rt-users@lists.bestpractical.com</a>
Subject: Re: [rt-users] goto ticket error (security problem)
On Sat, Mar 18, 2006 at 02:00:26AM -0000, Michael Shanks wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hello I am configuring a new helpdesk using request tracker, I notice one
problem and I am wondering if you can help me with my configuration,
When a user logs into the self service page they are presented with their
open tickets, top right is also the goto ticket option, when the user
</pre>
</blockquote>
<pre wrap=""><!---->types
</pre>
<blockquote type="cite">
<pre wrap="">in any ticket ID the ticket is shown to them even if they are not the
original submitter,
</pre>
</blockquote>
<pre wrap=""><!---->
You've granted "Everyone" the right to "ShowTicket"
</pre>
</blockquote>
</body>
</html>