[rt-users] Other queues showing up in "RT at a Glance"

Stephen Hancock sh.hancock at gmail.com
Mon Mar 28 12:24:16 EST 2005


3.4.2 is a beta version (I think) . 3.4.1 is the newest current
release(I think - again).  If so then this post probably belongs on
the devel  list.

Stephen Hancock


On Mon, 28 Mar 2005 11:49:42 -0500, Brelsfoard, Alex <alexb at wpi.edu> wrote:
>  
> OK, so one of my co-workers just noticed that people are seeing tickets from
> queues they don't have access too being listed in the "10 newest unowned
> tickets..." window.  But here's the kinda weird bit: there is nothing under
> the "Queue" column for the tickets in the queues these people don't have
> access to.  When I look (I have access to see all queues) I see all the
> queue names.  So, to recap, Everyone sees all the tickets listed in that
> window.  If you have access to a queue, you see its name listed, otherwise
> just blank space.  This is very dangerous, because anyone can click on any
> of those links to view the contents of those tickets,a nd they an even TAKE
> the ticket. 
>   
> This whole bit only recently came to happen (right after we upgraded from
> 3.0.1 to 3.4.2).  Any ideas as to how this happened? 
>   
> Thanks. 
> --Alex 
>   
> 
> Alex Brelsfoard 
> Web Applications Developer 
> Web Development Office 
> Worcester Polytechnic Institute 
> 508-831-6147 
> alexb at wpi.edu 
>   
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> 
> RT Administrator and Developer training is coming to your town soon!
> (Boston, San Francisco, Austin, Sydney) Contact training at bestpractical.com
> for details.
> 
> Be sure to check out the RT Wiki at http://wiki.bestpractical.com
> 
>



More information about the rt-users mailing list