Tickets :: [#7614] ticket summary displayed even if user has no permission on it

Summary	ticket summary displayed even if user has no permission on it
Queue	Whups
Queue Version	1.0
Type	Bug
State	Resolved
Priority	1. Low
Owners	chuck (at) horde (dot) org
Requester	stevens (at) stevens (dot) it
Created	10/30/2008 (6092 days ago)
Due
Updated	11/06/2008 (6085 days ago)
Assigned
Resolved	11/06/2008 (6085 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

11/06/2008 01:49:28 AM	Chuck Hagenbuch	Comment #3 Assigned to Chuck Hagenbuch State ⇒ Resolved	Reply to this comment
Fixed for 1.0.1 - thanks for catching this!

11/06/2008 01:48:57 AM	CVS Commit	Comment #2	Reply to this comment
Changes have been made in CVS for this ticket: http://cvs.horde.org/diff.php/whups/docs/CHANGES?r1=1.222&r2=1.223&ty=u http://cvs.horde.org/diff.php/whups/lib/Block/myrequests.php?r1=1.11&r2=1.12&ty=u http://cvs.horde.org/diff.php/whups/lib/Block/mytickets.php?r1=1.9&r2=1.10&ty=u http://cvs.horde.org/diff.php/whups/lib/Block/unassigned.php?r1=1.7&r2=1.8&ty=u

10/30/2008 08:03:08 PM	stevens (at) stevens (dot) it	Comment #1 Priority ⇒ 1. Low Patch ⇒ No Milestone ⇒ Queue ⇒ Whups Summary ⇒ ticket summary displayed even if user has no permission on it Type ⇒ Bug State ⇒ Unconfirmed	Reply to this comment
when horde is configured to display the "unassigned" tickets into the initial page (portal blocks), that section shows up EVERY unassigned ticket in EVERY queue disregarding the permissions system and letting every authenticated user to see ticket ID, short summary, status and priority for those tickets. Anyway, if he try to open a single ticket the "permission denied" message error is displayed instead of the actual ticket content. But it's annoying because of the short summary displayed may contain enough information to be considered a privacy issue.