[Rt-devel] [PATCH]: Ticket transaction querying in REST interface
is not restrictive enough
Jesse Vincent
jesse at bestpractical.com
Wed Apr 18 15:52:53 EDT 2007
Philip Kime wrote:
> Against 3.6.3 to file
>
> <rtpath>/share/html/REST/1.0/Forms/ticket/history
>
> This patch fixes the following issue:
>
> rt show ticket/N/history/id/M
>
> succeeds where transaction M has nothing to do with ticket N. Put
> another way, transaction queries always succeed if the transation
> number is valid.
>
Thanks. Applied
More information about the Rt-devel
mailing list