Tickets :: [#2412] Search bypasses permissions

6.0.0-beta1

9/24/25

Summary	Search bypasses permissions
Queue	Whups
Type	Bug
State	Not A Bug
Priority	2. Medium
Owners
Requester	guy_hanson (at) xyratex (dot) com
Created	08/09/2005 (7351 days ago)
Due
Updated	09/23/2005 (7306 days ago)
Assigned	09/08/2005 (7321 days ago)
Resolved	09/23/2005 (7306 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	No

09/23/2005 12:47:06 AM	Chuck Hagenbuch	Comment #3 State ⇒ Not A Bug	Reply to this comment
No feedback.

09/08/2005 08:37:15 PM	Chuck Hagenbuch	Priority ⇒ 2. Medium

09/08/2005 08:27:05 PM	Chuck Hagenbuch	Comment #2 Taken from Horde Developers State ⇒ Feedback	Reply to this comment
I can't reproduce this. If a user only has permission to a certain queue, searches with Queue set to "Any" do not show tickets outside of that queue.

08/09/2005 02:26:59 PM	Chuck Hagenbuch	Assigned to Horde Developers State ⇒ Assigned

08/09/2005 08:54:27 AM	guy_hanson (at) xyratex (dot) com	Comment #1 Priority ⇒ 3. High Type ⇒ Bug Summary ⇒ Search bypasses permissions Queue ⇒ Whups State ⇒ Unconfirmed	Reply to this comment
A member of a queue may perform a search on their own queue plus 'ANY' queue therefore all reports are shown. The permissions do not allow the reports to be displayed in full or edited but the subject line of every report is visible along with the queue and allocated resource.