[inciarco]

Originally Posted by Vaupell

tested this with a normal user i cannot edit tickets when i change the url

i can reply with a new msg and i can attach stuff
but i cannot edit existing threads in the tickets.

But if im on any moderator,supmod or admin i can edit them all.

Feel free to test, the first 3 tickets are tests
user :

 vbetest

pass :

 test

that user is a normal "registered" usergroup with wery limited forum acces
but got acces to helpcenter.



Ewen if i try to enter the Closeticket or editticket in the url
helpcenter.php?do=closeticket&tid=3 It just says you dont have acces
helpcenter.php?do=editticket&tid=3 It just says you dont have acces

as im concerned it works fine, only two problems
- private tickets ARE NOT PRIVATE.
- anyone can reply to tickets.

You Haven't Set Premissions for that Test Usergroup to Edit/Open/Close/Delete Tickets, that's why they can't do those Actions Not Even with Their Own Tickets. (I've done the Exercise with a Test User http://www.evisystems.org/forums/hel...o=ticket&tid=4 and that's why the Dropdown Menu that Shoul Appear at the Right of the Ticket doesn't Appear.

Do the Exercise EXACTLY as I Wrote in my Message, setting the Permissions EXACTLY as I've Described, do the Exercise, and You'll see yourself Editing/Deleting/Closing/Opening the Tickets of Any Other User (Even Admins).

I Keep my Conclusions as I mentioned them in my Last Reply, a HUGE BUG and Privacy Problem with the Ticket Info of other Users (Anybody can Edit/Delete/Open/Close Anybodies's Tickets if you set to YES the Options to Edit/Delete/Open/Close Tickets, Not ANY Ticket, just Tickets, because the ANY Tickets Function is Not in Use and the Edit/Delete/Open/Close Tickets is Working as ANY Tickets).

(Read my Other Posts in this Thread, I Reported that Bug many Months Ago but only in my Last Post I decided to Describe the Exact Process so that Anybody can Test and Know Exactly the Problem).

Other BUG, (but that would be workable if the other Bug weren't Happening) is that if you Set to YES the Permissions to Edit/Delete/Open/Close Tickets, you'll see the Dropdown Menu for those Options in ALL Tickets, and this should only be Displayed in the Tickets you can Perform Actions With.

My Best Regards.