[Tickets #2412] NEW: Search bypasses permissions

Tue Aug 9 01:54:28 PDT 2005

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=2412
-----------------------------------------------------------------------
 Ticket             | 2412
 Created By         | guy_hanson at xyratex.com
 Summary            | Search bypasses permissions
 Queue              | Whups
 State              | Unconfirmed
 Priority           | 3. High
 Type               | Bug
 Owners             | 
-----------------------------------------------------------------------

guy_hanson at xyratex.com (2005-08-09 01:54) wrote:

A member of a queue may perform a search on their own queue plus 'ANY' queue
therefore all reports are shown. The permissions do not allow the reports to
be displayed in full or edited but the subject line of every report is
visible along with the queue and allocated resource.