discord-tickets / bot

The most popular open-source and self-hosted ticket management bot for Discord - a free alternative to the premium and white-label plans of other popular ticketing bots.
https://discordtickets.app
GNU General Public License v3.0
933 stars 477 forks source link

[BUG] Leak Tickets to team member which dont have access to the category #555

Closed Luzifix closed 1 month ago

Luzifix commented 1 month ago

Is there an existing issue for this?

Current Behavior

The /tickets and /transcript commands show tickets from categories where a team member dont have access

Expected Behavior

The /tickets and /transcript commands show only tickets for categories where a team memeber have access for

Steps To Reproduce

  1. Create two roles
  2. Create two categories and set role 1 to category 1 and role 2 to category 2
  3. Create a ticket in both categories and close them
  4. Call with a team member which have role 1 the /tickets command on the user which created the two tickets in the two categories and you can see both. The expected behavior is that the team member which have only one of the two roles can only see tickets from categorie 1

Environment

- OS:
- Node:
- NPM:
- Bot:

Anything else?

No response

eartharoid commented 1 month ago

@all-contributors please add @Luzifix for bug

allcontributors[bot] commented 1 month ago

@eartharoid

I've put up a pull request to add @Luzifix! :tada: