[inciarco]

Originally Posted by Bilderback

ooo - nice find. Private tickets are viewable to everyone and you can url hack to edit.
I'll come back when the permissions are setup correctly.
Nice Mod though-I'll reinstall when better.

The Mod is Really Nice but this Security/Privacy Issues are Critical when Critical Private Information is Shared.

For the Regular Forums there are Options to be Set for the Forum's Permissions to Allow or Not Users to see Other Member's Messages, that's the same Expected for this Mod, that even if a User tries to Guess someone else's Private Ticket isn't Able to See it.

Also the Public/Private Tickets of Others can be Edited by Any User, and that's not right; only the Owner of the Ticket and Admins should be able to do that, (perhaps other Usergroups set on the Mod's Options).

I also hope that the Developper can Fix this Issues, the Mod has Great Potential for Efficient Support on the Boards.

My Best Regards.