<?xml version="1.0" encoding="UTF-8"?> 
<?xml-stylesheet href="https://dev.horde.org/themes/horde//default/feed-rss.xsl" type="text/xsl"?> 
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> 
 <channel> 
  <title>ticket summary displayed even if user has no permission on it</title> 
  <pubDate>Fri, 10 Apr 2026 03:14:11 +0000</pubDate> 
  <link>https://bugs.horde.org/ticket/7614</link> 
  <atom:link rel="self" type="application/rss+xml" title="ticket summary displayed even if user has no permission on it" href="https://bugs.horde.org/ticket/7614/rss" /> 
  <description>ticket summary displayed even if user has no permission on it</description> 
 
   
   
  <item> 
   <title>when horde is configured to display the &quot;unassigned&quot; tickets</title> 
   <description>when horde is configured to display the &quot;unassigned&quot; tickets into the initial page (portal blocks), that section shows up EVERY unassigned ticket in EVERY queue disregarding the permissions system

and letting every authenticated user to see ticket ID, short summary, status and priority for those tickets.



Anyway, if he try to open a single ticket the &quot;permission denied&quot; message error is displayed instead of the actual ticket content. But it&#039;s annoying because of the short summary displayed may contain enough information to be considered a privacy issue.</description> 
   <pubDate>Thu, 30 Oct 2008 20:03:08 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/7614#t50201</link> 
  </item> 
   
  <item> 
   <title>Changes have been made in CVS for this ticket:

http://cvs.h</title> 
   <description>Changes have been made in CVS for this ticket:

http://cvs.horde.org/diff.php/whups/docs/CHANGES?r1=1.222&amp;r2=1.223&amp;ty=u
http://cvs.horde.org/diff.php/whups/lib/Block/myrequests.php?r1=1.11&amp;r2=1.12&amp;ty=u
http://cvs.horde.org/diff.php/whups/lib/Block/mytickets.php?r1=1.9&amp;r2=1.10&amp;ty=u
http://cvs.horde.org/diff.php/whups/lib/Block/unassigned.php?r1=1.7&amp;r2=1.8&amp;ty=u</description> 
   <pubDate>Thu, 06 Nov 2008 01:48:57 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/7614#t50310</link> 
  </item> 
   
  <item> 
   <title>Fixed for 1.0.1 - thanks for catching this!</title> 
   <description>Fixed for 1.0.1 - thanks for catching this!</description> 
   <pubDate>Thu, 06 Nov 2008 01:49:28 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/7614#t50311</link> 
  </item> 
   
   
 
 </channel> 
</rss> 
