[rt-users] 10 newest unowned tickets
James Berwick
jim at jamesberwick.com
Wed Jul 21 14:04:24 EDT 2010
On 7/21/2010 1:46 PM, Kenneth Crocker wrote:
> Jeff,
>
> Not if I'm not supposed to. So what if there aren't 10 unowned tickets
> in the list? As a matter of security, I sure wouldn't want someone
> looking at sensitive payroll info on requests in the Payroll Queue if
> they aren't even allowed to have access to the payroll Queue.
>
> Kenn
> LBNL
If I understand correctly:
There are 100 open tickets. The 10 newest unowned tickets belong to a
queue that a user can't see. The user logs in and the 10 newest unowned
tickets box is empty. There are 90 other tickets that are new and
unowned that the user should be allowed to see but are not displayed.
What I believe Mark and Jeff are saying (and that UseSQLForACLChecks
does) is have the box be filled with the 10 newest unowned tickets that
a user is allowed to see, ie, filter the tickets during the search as
opposed to finding the top 10 and then filtering out what shouldn't be
visible.
More information about the rt-users
mailing list