zammad / zammad

Zammad is a web based open source helpdesk/customer support system
https://zammad.org
GNU Affero General Public License v3.0
4.42k stars 752 forks source link

Conditions and actions allow to set ineligible users as owners or customers #4374

Open MrGeneration opened 1 year ago

MrGeneration commented 1 year ago

Infos:

Expected behavior:

When modifying an object with conditions or actions, Zammad will verify if customer and owner users are eligible for corresponding fields.

Actual behavior:

When modifying an object with conditions or actions, Zammad allows to set any user as owner or customer. This allows to create a configuration that may not work as expected.

For example, when adding a ticket template, Zammad allows to set any user from the database as an owner. When applying this template to a ticket, Zammad tries to set the user as owner and will fall back to "-" if the affected user is not supported in that scope.

This issue applies to :perform, :conditions, :options attributes in Job, Macro, Overview, Sla, Template, Trigger classes.

Steps to reproduce the behavior:

Yes I'm sure this is a bug and no feature request or a general question.

dominikklein commented 1 year ago

I think this related to the problem that the owner field in general shows currently in the complete admin area the wrong values (same like the customer field).