View Issue Detail

ID	Project	Category	Submitted / Last Updated
01477	UserSpice	Plugins	2022-02-28 18:34:21 / 2022-11-06 18:18:12
Reported	Dan Hoover	Assigned To	Unassigned
Priority	none	Reported	5.4.0
Status	closed	Resolution Version and Commit
Summary	Tickets plugin bug
Description	In the support ticket plugin, I noticed an issue when a user created a ticket, they couldn't view their own tickets. If they went to their ticket they would get an error "This is not your ticket" I didn't see anything about it when searching here, but was able to fix it. In ticket.php around line 50 is this code: if((!hasPerm([$ticSettings->perm],$user->data()->id) && !hasPerm([$ticSettings->perm_to_assign],$user->data()->id) && !hasPerm([2],$user->data()->id))){ logger($user->data()->id,"Ticket Error","Tried to access ticket without permission"); die("This is not your ticket"); } Surrounding it with an if statement to only run if the person viewing the ticket isnt the ticket creator fixed the issue. if (($ticket->user != $user->data()->id)) { if((!hasPerm([$ticSettings->perm],$user->data()->id) && !hasPerm([$ticSettings->perm_to_assign],$user->data()->id) && !hasPerm([2],$user->data()->id))){ logger($user->data()->id,"Ticket Error","Tried to access ticket without permission"); die("This is not your ticket"); } }

August 2022

also, might be worth hiding the display all tickets link to users that dont have that permission on the accounts page