wc55
commented
2 years ago Complementing: The error is when tikcet is assigned to a group and removed from the current group.
Open wc55 opened 2 years ago
wc55
commented
2 years ago Complementing: The error is when tikcet is assigned to a group and removed from the current group.
wc55
commented
2 years ago Complementing: The error is when tikcet is assigned to a group and removed from the current group.
I don't think I provided the full scenario.
The error appears when the ticket is assigned to another group and removed from the current group. The message appears to the technician doing the action.
Example: Technician 1 from group A, assigns ticket 100 to group B and unassigns group A.
If you assign group B and save, you do not receive the error, but when you remove group A, you receive the message.
If you assign group B and remove group A and then click Save, the error also appears.
On both occasions the ticket is sent, despite the message
cconard96
commented
2 years ago I am not able to recreate this issue on 10.0.2 or the latest GLPI 10 commit. I created a profile with the same Ticket rights as shown in the screenshot, created a ticket with one user and assigned it to a group that my test user was in. The only way the test user should have been able to see the ticket was through that group. As the test user, I removed the first group and added a second group it was a member of in the same action, and I never saw an access error.
wc55
commented
2 years ago Sorry, maybe I didn't inform you correctly.
The ticket is open in group A, and the user has access only to group A. The error appears when the user assigns the ticket to group B.
In my example, the user tried to assign the ticket from the "CSA" group to the "SSI" group, but he only has access to the "CSA" group and has no access to the "SSI" group.
The assignment is done, but there is this message. If possible, I would like the functionality not to display the message.
User permissions
github-actions[bot]
commented
2 years ago There has been no activity on this issue for some time and therefore it is considered stale and will be closed automatically in 10 days.
If this issue is related to a bug, please try to reproduce on latest release. If the problem persist, feel free to add a comment to revive this issue. If it is related to a new feature, please open a topic to discuss with community about this enhancement on suggestion website.
You may also consider taking a subscription to get professionnal support or contact GLPI editor team directly.
wc55
commented
2 years ago Hi
In version 10.0.3, the issue is still reproduced when a technician assigns the ticket to another group he doesn't have access to and removes his own group.
In the profile, the technician does not have access to all groups
github-actions[bot]
commented
1 year ago There has been no activity on this issue for some time and therefore it is considered stale and will be closed automatically in 10 days.
If this issue is related to a bug, please try to reproduce on latest release. If the problem persist, feel free to add a comment to revive this issue. If it is related to a new feature, please open a topic to discuss with community about this enhancement on suggestion website.
You may also consider taking a subscription to get professionnal support or contact GLPI editor team directly.
wc55
commented
1 year ago Hi
In version 10.0.5, the issue is still reproduced when a technician assigns the ticket to another group he doesn't have access to and removes his own group.
In the profile, the technician does not have access to all groups.
I believe that the "assigned" function of the profile that gives access to forward the ticket, but this error occurs
cedric-anne
commented
1 year ago Hi,
The problem here is probably that you remove yourself the right to display the ticket itself. The right way to fix this is probably to redirect the user to the ticket list when it has not anymore the right to access the ticket he just updated.
wc55
commented
1 year ago Hi
I was only able to test version 10.0.6 now. Two messages are displayed, one confirming the update and another informing about the technician not having access to the call.
Now the messages at least hint that the call has been assigned.
I saw that the correction will be made in version 10.0.7. I will wait.
Thank you very much
Code of Conduct
Is there an existing issue for this?
Version
10.0.2
Bug description
When a ticket is assigned to another group, a message appears on the screen: "You don't have permission to perform this action."
Relevant log output
Page URL
http://localhost/front/ticket.form.php?id=XXX
Steps To reproduce
1 - Access a ticket:
2 - Assign the ticket to another group and remove it from the current group:
3 - Click on the "Save" button.
4 - Error is displayed, but ticket is assigned:
5 - Ticket in the other group:
Your GLPI setup information
Instruções de instalação e configuração
Server
Operating system: Linux glpi 5.10.16.3-microsoft-standard-WSL2 #1 SMP Fri Apr 2 22:23:49 UTC 2021 x86_64 PHP 7.4.28 apache2handler (Core, FFI, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, apache2handler, apc, apcu, bz2, calendar, ctype, curl, date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, imap, intl, json, ldap, libxml, mbstring, mysqli, mysqlnd, openssl, pcre, pdo_mysql, posix, readline, session, shmop, sockets, sodium, standard, sysvmsg, sysvsem, sysvshm, tokenizer, xml, xmlreader, xmlrpc, xmlwriter, xsl, zip, zlib) Setup: max_execution_time="30" memory_limit="128M" post_max_size="8M" safe_mode="" session.save_handler="files" upload_max_filesize="2M" Software: Apache/2.4.53 (Debian) (Apache/2.4.53 (Debian) Server at 200.17.210.105 Port 80 ) Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0 Server Software: mariadb.org binary distribution Server Version: 10.7.4-MariaDB-1:10.7.4+maria~focal Server SQL Mode: STRICT_TRANS_TABLES,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION Parameters: glpi_user@mariadb/glpidb Host info: mariadb via TCP/IP PHP version (7.4.28) is supported. Sessions configuration is OK. Allocated memory is sufficient. mysqli extension is installed. Following extensions are installed: dom, fileinfo, json, simplexml. curl extension is installed. gd extension is installed. intl extension is installed. libxml extension is installed. zlib extension is installed. The constant SODIUM_CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES is present. Database engine version (10.7.4) is supported. The log file has been created successfully. Write access to /var/www/html/glpi/files/_cache has been validated. Write access to /var/www/html/glpi/config has been validated. Write access to /var/www/html/glpi/files/_cron has been validated. Write access to /var/www/html/glpi/files has been validated. Write access to /var/www/html/glpi/files/_dumps has been validated. Write access to /var/www/html/glpi/files/_graphs has been validated. Write access to /var/www/html/glpi/files/_lock has been validated. Write access to /var/www/html/glpi/files/_pictures has been validated. Write access to /var/www/html/glpi/files/_plugins has been validated. Write access to /var/www/html/glpi/files/_rss has been validated. Write access to /var/www/html/glpi/files/_sessions has been validated. Write access to /var/www/html/glpi/files/_tmp has been validated. Write access to /var/www/html/glpi/files/_uploads has been validated. Web access to the files directory should not be allowed but this cannot be checked automatically on this instance. Make sure access to error log file (/files/_log/php-errors.log) is forbidden; otherwise review .htaccess file and web server configuration. exif extension is installed. ldap extension is installed. openssl extension is installed. zip extension is installed. bz2 extension is installed. Zend OPcache extension is installed. Following extensions are installed: ctype, iconv, mbstring, sodium. Write access to /var/www/html/glpi/marketplace has been validated. Access to timezone database (mysql) is not allowed.GLPI constants
Libraries
LDAP directories
SQL replicas
Notifications
Plugins list
fields Name: Additional fields Version: 1.17.0 State: Enabled Install Method: Manual behaviors Name: Comportamentos Version: 2.7.2 State: Enabled Install Method: Manual datainjection Name: Data injection Version: 2.11.2 State: Installed / not activated Install Method: Manual formcreator Name: Form Creator Version: 2.13.0-rc.2 State: Enabled Install Method: Manual genericobject Name: Gerenciamento de objetos Version: 2.12.1 State: Enabled Install Method: Manual itilcategorygroups Name: Grupos ItilCategory Version: 2.5.0 State: Installed / not activated Install Method: Manual tag Name: Tag Management Version: 2.9.2 State: Installed / not activated Install Method: ManualAnything else?
Profile settings