[rt-users] goto ticket error (security problem)

Jesse Vincent jesse at bestpractical.com
Fri Mar 17 22:22:53 EST 2006




On Sat, Mar 18, 2006 at 02:00:26AM -0000, Michael Shanks wrote:
> Hello I am configuring a new helpdesk using request tracker, I notice one
> problem and I am wondering if you can help me with my configuration, 
>  
> When a user logs into the self service page they are presented with their
> open tickets, top right is also the goto ticket option, when the user types
> in any ticket ID the ticket is shown to them even if they are not the
> original submitter, 
>  

You've granted "Everyone" the right to "ShowTicket"



More information about the rt-users mailing list