Critical Ticket Statuses Bug

[caitlyntw]

There are a few critical problems with ticket module:
1. What if a ticket is assigned to a user, but the user doesn't have permission to the department the ticket is in?

2. Ticket Status is supposed to be bind to department(s) but it's available to everyone and all department from the ticket detail page. So if you assign a ticket to a status that doesn't bind to a department, you won't be able to find that ticket in that department unless a search for that ticket ID is conducted.

[rcole]

I have ran into the first problem myself. I have just needed to make sure that the people that the tickets get assigned to have access to the department. I don't know about the second problem.

[Hermelin]

Yes, the two problems exists, I assume they are tracked in flyspray?

Anne