Customer Searсh

[yuri0001]

In my OTRS installation CustomerID is used as Company ID.
In customer interface I'll removed the ability to view by the client company tickets.
BUT.
In customer search, when customer does not indicate his Name in search crieria - system returns as result all company tickets wich match the search criteria.
As result - customer gets access to these tickets - it's not good.
How to restrict customer access to company tickets through the search?

[crythias]

don't allow them to search. or change the code.

[otrsgsy]

Hi Crythias,

If I wanted to change the code to restrict the access I assume I would copy the CustomeTictetSearch.dtl file from the Standard folder to my site folder and then tweak the From field so that it is locked down to the customer who created the ticket.

If so, could you please advise what code would be required to lock the search to the logged in customer?

Code: Select all

<div>
          <label for="From">$Text{"From"}</label>
          <input title="$Text{"Sender"}" type="text" id="From" name="From" value="$QData{"From"}" size="20" />
</div>

Thanks