[Rt-devel] [BUG] Reminders assume you have CreateTicket right

[Jesse Vincent]

On Thu, Sep 21, 2006 at 09:33:16AM -0400, Todd Chapman wrote:
> Reminders::Add assumes you have CreateTicket for the queue of
> the ticket the reminder is being attched to. The method does
> not check the return of Ticket::Create and ends up generating
> a bad transaction (which causes further problems to be discussed
> later).
> 
> How should this be resolved?
> 
> * Checking the return from Create obviously


Yes.
> 
> but also,
> 
> * Have a queue where anyone can create reminders?

This leads to weird data hiding or leakage issues.

> * Allow the selecting of a queue the user has CreateTicket
>   rights on?
> 
> * Don't show the reminders form if the user doesn't have
>   CreateTicket on the queue?

This seems the most sane answer to me

> 
> Please advise.
> 
> -Todd
> _______________________________________________
> List info: http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-devel
> 

--