<?xml version="1.0" encoding="ISO-8859-1"?>
<?xml-stylesheet href="http://bugs.horde.org/themes/feed-rss.xsl" type="text/xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
 <channel>
  <title>Queue summary permission problem</title>
  <pubDate>Fri, 29 Aug 2008 20:45:50 -0400</pubDate>
  <link>http://bugs.horde.org/ticket/6603</link>
  <atom:link rel="self" type="application/rss+xml" title="Queue summary permission problem" href="http://bugs.horde.org/ticket/6603/rss" />
  <description>Queue summary permission problem</description>

  
  
  <item>
   <title>Hi,

the block &quot;Queue Summary&quot; shows summaries of queues e</title>
   <description>Hi,

the block &quot;Queue Summary&quot; shows summaries of queues even if the user doesn't have the proper permissions to view them. The user even can get a list of open tickets of these queues:

horde/whups/queue/?id=...

followed by notices

Notice: Undefined index: name in 
/var/www/html/horde/whups/queue/index.php on line 43

Notice: Undefined index: id in /var/www/html/horde/whups/lib/Whups.php 
on line 46

Notice: Undefined index: name in 
/var/www/html/horde/whups/queue/index.php on line 57


Alt least, the tickets are not accessible by the user:

&quot;You do not have permission to access this ticket...&quot;


Volker
</description>
   <pubDate>Mon, 14 Apr 2008 01:34:02 -0400</pubDate>
   <link>http://bugs.horde.org/ticket/6603#t44618</link>
  </item>
  <item>
   <title>I was never able to reproduce the undefined index, but permi</title>
   <description>I was never able to reproduce the undefined index, but permissions are honored now.</description>
   <pubDate>Wed, 23 Apr 2008 23:19:11 -0400</pubDate>
   <link>http://bugs.horde.org/ticket/6603#t44852</link>
  </item>
  

 </channel>
</rss>
