bug? can view tickets without being member of department

dhs

Consider the following scenario:
Departments X and Y
Agent Z is member of only department X but gets a link to a closed ticket in department Y, when clicking on the link it opens the ticket with all replies and information present! Seems to be a bug. Tested on version v1.10.6. Haven't updated yet but it isn't on the fixlist of v1.10.7.

mLipok

This depends what kind of link he get ?
Some links are supposed to be posted to client.

dhs

No its an admin link like this:
https://osticket.organisation.local/scp/tickets.php?id=803968

RBGE

dhs I certainly don't notice that in my installation (I cannot see tickets in a department I'm not a member of), although I'm running 1.12.3. Has Agent Z perhaps been added as a collaborator, or included in any referals?

ntozier

unable to replicate this. Also your version is ancient, you should really upgrade.