[solved] Linking ticket with ITSM/CI object OTRS 2.4.9

[hitazcl]

I have a security problem in OTRS 2.4.9 with ITSM/ConfigItem.

I have created an OTRS 2.4.9 installation on a server with ITSM installed.
The system is to handle contracts for some divisions and their notifications...

There are diffent queues, contract - classes and restrictions (roles/groups) in the system.

The workflow is as follow:
1. omebody creates a contract in the queue - defined for the single division
2. after it he creates a ticket as a reminder... and for that he needs to link the coming ticket with the known contract by the link popup window out of the TicketEmail-Template
the problem lies in the popup window - it shows all of the contracts over all divisions.
if I'll klick on a "contract" without permissions, I can not see it, but in the overview (link object) I can see all of the contracts

Do you have a little kind of idea to solve this request?!

[hitazcl]

Okay, I did a migration to 3.0.11 and it works...
Restrictions are given!