maybe this can help in the meanwhile :)

https://vborg.vbsupport.ru/showpost....&postcount=312

I tired it... it didn't work.

URGENT

Found a very large problem. When a ticket is submitted, they are given a URL. If they change the number of the ticket in that URL to a different number, you can view other users tickets. That completely nulls the usage of the Usergroup Settings.

http://forums.website.com/helpdesk.php?do=ticket&tid=6

If you change the number 6 to the number 7, you can view the next ticket AND you can reply to it.

You really need to fix this.

Will this install and work on any vb version before 3.07?

xYarub - That is a problem with the reply. Although, I made it so it was intended that you can read all tickets, but you shouldn't be able to reply to them. I'll fix that tonight and send out an update.

Boofo - This will work with any 3.x series. It only uses vBulletin's usergroup settings and vBulletin Options. So it will work on any series.

Thanks red baron, i'll definately apply the tip shortly (might as well wait on the update for now). Your post was actually exactly the one i was referring to ;)

good stuff, a help desk feature i can't live without. Far too busy/lazy to manually check all day, and expect other staff to all do the same.

imo, this is a very bad idea to do intentional. People requesting support for various things tend to include sensitive information within their ticket. If it wasn't semi private/sensitive, then they probably would just post it publically.

He told me that he would be working on a fix to prevent other users from viewing and replying.

ok Call me stupid. I am fairly new to VB and I have the file uploaded but now I am not sure how to run it or where in admin directory. Can anyone please help?

Thank's muchly.

SpanishHarlem - read the install.txt file in the zip file. It tells you how to install it. Just call the file in your browser...

What's this? The long awaited version upgrade? :surprised:

Anyways, I fixed the bug where anyone could view the ticket. It now only allows usergroups who are primary usergroups or have membership usergroup id as one of thier usergroups, or obviously if you're the ticket creator.

This now also sends a PM to EVERY user of the department where the ticket is updated. If a ticket is updated it will now send any user a PM notifying them of the update! :)

Let me know of any bugs in this! :o

I'll also be sending out an update here in the next few minutes.