[Tickets #7614] ticket summary displayed even if user has no permission on it

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/7614
------------------------------------------------------------------------------
  Ticket             | 7614
  Created By         | stevens at stevens.it
  Summary            | ticket summary displayed even if user has no permission
                     | on it
  Queue              | Whups
  Version            | 1.0
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


stevens at stevens.it (2008-10-30 16:03) wrote:

when horde is configured to display the "unassigned" tickets into the  
initial page (portal blocks), that section shows up EVERY unassigned  
ticket in EVERY queue disregarding the permissions system
and letting every authenticated user to see ticket ID, short summary,  
status and priority for those tickets.

Anyway, if he try to open a single ticket the "permission denied"  
message error is displayed instead of the actual ticket content. But  
it's annoying because of the short summary displayed may contain  
enough information to be considered a privacy issue.