Tickets :: [#3789] pick up number for guest ,if without read permission

Summary	pick up number for guest ,if without read permission
Queue	Whups
Type	Enhancement
State	Accepted
Priority	1. Low
Owners
Requester	david (at) tmv (dot) gov (dot) tw
Created	04/18/2006 (808 days ago)
Due
Updated	09/28/2007 (280 days ago)
Assigned
Resolved
Attachments
Milestone
Patch	No

09/28/2007	Chuck Hagenbuch	State ⇒ Accepted

07/20/2006	Chuck Hagenbuch	State ⇒ New

04/19/2006	david (at) tmv (dot) gov (dot) tw	Comment #4	Reply to this comment
Here is my thought about this issue: First,the ticket did not realy created into system until guest confirm by the url or pick-up number given in the first notification.This is for verify guest's mail address. Second,those who can provide corrct pick-up number or url,system will treat them as CREATOR not GUEST only for that ticket. David

04/19/2006	Jan Schneider	Comment #3	Reply to this comment
Yes, the permissions should be opposite. E.g. if the user has read but not show permissions, he will get the regular notification message and can access the ticket through the url, but it won't show up in any bug listings. This won't keep any anonymous user from trying several bug number manually though, so it's only obfuscation by hiding.

04/19/2006	Chuck Hagenbuch	Comment #2 State ⇒ Feedback	Reply to this comment
What would the pick-up number link to? One problem is that SHOW permission means you can see an object exists, but not what it is (more or less - times for calendar events but not titles, etc.). How would having SHOW let someone see information about a ticket, using that understanding of SHOW?

04/18/2006	david (at) tmv (dot) gov (dot) tw	Comment #1 State ⇒ New Queue ⇒ Whups Summary ⇒ pick up number for guest ,if without read permission Priority ⇒ 1. Low Type ⇒ Enhancement	Reply to this comment
Follow up ~~ticket 3630~~ If have a queue where guests have the rights "Show" and "Edit", but not "Read" So they are able to report something, but not to read the content afterwards. On this way it is possible to report critical content that should not be accessible by anyone. How about send guest a pick-up number in the first notification message,so they can read ticket's history ,if guest just have Show and Edit permission.