I found it rather odd that the system does not hold it the staff accountable for the ticket they create. In fact, any staff member can claim to be another staff member, given that they know how to spoof their IP address.

For example, employee A wants to order employee B to do something, but A knows B won't do anything if A verbally ordered B do it. So A spoof his IP address to that of Manager M and issues B a ticket to do what A wants.

I figured that although most people don't know how to spoof IPs, this possibly could prove a bit risky. I'm probably thinking too much, but I wanted to have some visible accountability/deterent so staff users won't even think about trying to impersonate another.

This the quick fix I came up with:

============================

Open ./osticket/scp/tickets.php

Find:

$msg='Ticket created successfully';

Before it add:

if($thisuser->isStaff()) $ticket->postNote('New Ticket','Ticket created by '.$thisuser->getUserName());

=============================

Now an internal note will appear when a ticket is created by any staff member.

This isn't exactly the method I would have preferred to use to accomplish this mod, but it's the easiest and quickest.

With that said, I have a request: Could you add a field in the `ost_ticket` table that will track the `staff_id` of the staff who created the ticket. I know that there is already a `staff_id` field, but I think that is currently being used to track who is currently being assigned the ticket (am I right?).

And of course display this piece of info in the ticket's detail information view.

Hope my cheap mod will help some people get by before they or if they decide to implement this.

Thanks.

EDIT I created a Feature Request thread regarding this at http://osticket.com/forums/showthread.php?p=5152#post5152(http://osticket.com/forums/showthread.php?p=5152#post5152)