[Rt-devel] [PATCH]: Ticket transaction querying in REST interface is not restrictive enough

Jesse Vincent jesse at bestpractical.com
Wed Apr 18 15:52:53 EDT 2007


Philip Kime wrote:
> Against 3.6.3 to file
>  
> <rtpath>/share/html/REST/1.0/Forms/ticket/history
>  
> This patch fixes the following issue:
>  
> rt show ticket/N/history/id/M
>  
> succeeds where transaction M has nothing to do with ticket N. Put 
> another way, transaction queries always succeed if the transation 
> number is valid.
>

Thanks. Applied




More information about the Rt-devel mailing list