Why can a user read a ticket which is not in his Group/Qeue?

[mohnewald]

Hello,

i would like to allow a user group access to specific queues only.

Therefore i create a group + queue and assigned the group <=> queue.

Now the user gets an access denied message when he tries to access tickets which are in OTHER queues => Perfect. Works.

HOWEVER, if the user is the owner of the ticket, he can access the ticket and fully read it.
Even if its not in his queue.

How can i fix that?

Cheers,
Michael

[root]

Hi,

There is nothing to fix, and it's intentional. Several permission modules grant access to tickets. See the system configuration for settings starting with Ticket::Permission###. For the owner, it's Ticket::Permission###1-OwnerCheck that is enabled by default.

Instead of changing.a default setting, I recommend first to check if it's required and what made the agent the ticket's owner.

- Roy

[mohnewald]

thanks