[Rt-devel] Security concern for RT 3.3/3.4 CF access controls.

[Jesse Vincent]

On Fri, Dec 03, 2004 at 01:00:13PM -0500, Stephen Turner wrote:
> A quick test in 3.3.12 suggests there's nothing to prevent the user from 
> seeing the transaction in the ticket history.

Revision 1953 fixes this issue. I've got a couple more things to go in
before the next point release, which I may try to make 3.4RC1.