[rt-users] 3.8.4 - Customers able to see tickets for queues they don't have rights on

Jesse Vincent jesse at bestpractical.com
Wed Jul 14 09:49:15 EDT 2010




> This is on 3.8.4 - we've got 3.8.8 on a test system and it doesn't seem to be showing the same problem on there.
> 
> Anyone noticed this before??
> 
> I use UseSQLForACLChecks = 1. If I turn that off then at least they can't see things they shouldn't, but now the search results are very messed up and you might have to page until you can find a visible ticket.
> 

I suspect that this is "We've fixed a bug in UseSQLForACLChecks" more
than anything else.

There's a reason (several actually) that we describe UseSQLForACLChecks
as beta ;)



More information about the rt-users mailing list