search

discord-tickets / bot

The most popular open-source and self-hosted ticket management bot for Discord - a free alternative to the premium and white-label plans of other popular ticketing bots.
https://discordtickets.app
GNU General Public License v3.0
880 stars 459 forks source link

Answers can be edited by other users #508

Open jxshuaa opened 7 months ago

jxshuaa commented 7 months ago

Is there an existing issue for this?

Current Behavior

I have recently started using discord-tickets self-hosted bot and I came across when I opened a ticket my friend could edit my answers to the questions

image

This is a preview of the tickets in my Discord Account where I opened the issue. When I go to a alt account, I can edit the users answers.

image

I think this is a bug since sometimes people can have staff that don't follow the rules and they can change their users answers and loosing the original ones.

Expected Behavior

I would have expected an error that only the user that tried editing it can see. And it wouldn't allow ANYONE to change the text except for the user that created the ticket, neither that people are added to the ticket can edit it as well so I think we need this fixed. ASAP.

Steps To Reproduce

  1. Have 2 discord accounts and a server with a selfhosted bot (or public bot if it works).
  2. Next, open a ticket in one Discord Account, ( MUST HAVE QUESTIONS SET UP IN THE CATEGORIES)
  3. Next, on the other Discord Account navigate to the ticket
  4. Next, try to edit the user's answers.
  5. You will successfully changed the users answers. image

Environment

- OS: Pterodactyl ( Ubuntu 20.04 ) 
- Node: v18
- NPM: latest
- Bot: latest

Anything else?

No response

eartharoid commented 6 months ago

image

https://discord.com/channels/451745464480432129/893207320878776400/1193637021319712848

I don't think this is a bug but I'll keep it open and consider making it configurable.