[rt-users] 10 newest unowned tickets

James Berwick jim at jamesberwick.com
Wed Jul 21 14:04:24 EDT 2010


On 7/21/2010 1:46 PM, Kenneth Crocker wrote:
> Jeff,
>
> Not if I'm not supposed to. So what if there aren't 10 unowned tickets 
> in the list? As a matter of security, I sure wouldn't want someone 
> looking at sensitive payroll info on requests in the Payroll Queue if 
> they aren't even allowed to have access to the payroll Queue.
>
> Kenn
> LBNL
If I understand correctly:
There are 100 open tickets.  The 10 newest unowned tickets belong to a 
queue that a user can't see.  The user logs in and the 10 newest unowned 
tickets box is empty.  There are 90 other tickets that are new and 
unowned that the user should be allowed to see but are not displayed.

What I believe Mark and Jeff are saying (and that UseSQLForACLChecks 
does) is have the box be filled with the 10 newest unowned tickets that 
a user is allowed to see, ie, filter the tickets during the search as 
opposed to finding the top 10 and then filtering out what shouldn't be 
visible.



More information about the rt-users mailing list