[Rt-devel] [BUG] Reminders assume you have CreateTicket right
jesse at bestpractical.com
Fri Sep 22 10:09:54 EDT 2006
On Thu, Sep 21, 2006 at 09:33:16AM -0400, Todd Chapman wrote:
> Reminders::Add assumes you have CreateTicket for the queue of
> the ticket the reminder is being attched to. The method does
> not check the return of Ticket::Create and ends up generating
> a bad transaction (which causes further problems to be discussed
> How should this be resolved?
> * Checking the return from Create obviously
> but also,
> * Have a queue where anyone can create reminders?
This leads to weird data hiding or leakage issues.
> * Allow the selecting of a queue the user has CreateTicket
> rights on?
> * Don't show the reminders form if the user doesn't have
> CreateTicket on the queue?
This seems the most sane answer to me
> Please advise.
> List info: http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-devel
More information about the Rt-devel