[Tickets #6603] Queue summary permission problem

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6603
-----------------------------------------------------------------------
 Ticket             | 6603
 Created By         | horde40 at volkerthen.com
 Summary            | Queue summary permission problem
 Queue              | Whups
 Type               | Bug
 State              | Unconfirmed
 Priority           | 2. Medium
 Milestone          |
 Patch              |
 Owners             |
-----------------------------------------------------------------------


horde40 at volkerthen.com (2008-04-14 01:34) wrote:

Hi,

the block "Queue Summary" shows summaries of queues even if the user
doesn't have the proper permissions to view them. The user even can get a
list of open tickets of these queues:

horde/whups/queue/?id=...

followed by notices

Notice: Undefined index: name in
/var/www/html/horde/whups/queue/index.php on line 43

Notice: Undefined index: id in /var/www/html/horde/whups/lib/Whups.php
on line 46

Notice: Undefined index: name in
/var/www/html/horde/whups/queue/index.php on line 57


Alt least, the tickets are not accessible by the user:

"You do not have permission to access this ticket..."


Volker