How do i/Bug? Disallow ticket submission for a usergroup

[Sheep]

The problem is not as simple as the title

Here is a sample:

my group "registered" has all the Permissions: Tickets set to NO

Can View Submit Ticket Widget No
Can Submit Ticket No
Should Send Ticket Autoresponder No
Can Change Ticket Properties No

my account support1@blahblah.com is in the "registered" group.
on the user web-interface he can't see the submit a ticket (OK!)
but he can see the "view tickets" (feature request? should be hidden if no tickets created by the staff)

My main trouble is with the "can submit ticket" permission. If he can't "View Submit Ticket Widget " (option1) what's the point of this option.
Possible answer: "external script pointing directly to the addaticket page" (that'd be ok)
My problem: if the support1@blahblah.com submit a ticket via email queue (set to "only registered") the ticket get created and not rejected!
Question: is it a bug or i'm i missing the point with the "Can Submit Ticket" option

While i'm at it, lets suggest something (discuss it?)
When the staff create a ticket assigned to an email not registered it creates an account. My suggestion is that it should be nicer to add those accounts under a "autocreated" usergroup and not in "registered" one (that's confusing and we may only want the account to be restricted to guest permissions+can view his ticket&not submit one)


... hop! back to work... i'll continue to analyse the user registration/ticket workflow, so i should be back with more quesitons. I'm finding a lot a strange things (like those ones).


Greetings,
Antoine

[Siora]

Try clearing your cache folder. I have the same type of permissions and I don't see the "view ticket" or "submit ticket" widgets.

[Sheep]

It was empty but i tried to empty it after every steps but i didn't change anything :\ I guess i have a bug... but well... that's not the main question i'll try to solve it later on.

Does anyone have the same "bug" as mine with the combo with "no submit" and "email submit"

[Sheep]

Originally Posted by Siora

Try clearing your cache folder. I have the same type of permissions and I don't see the "view ticket" or "submit ticket" widgets.

I took a look at the code.

Line 53 of "includes\Widgets\widgets.php"

PHP Code:

(!empty($_SWIFT["user"]["userid"]) && $module->isRegistered(MODULE_TICKETS)) 


there is no check of rights for the viewTickets like the one for submitTickets on line 63

PHP Code:

if ($module->isRegistered(MODULE_TICKETS) && $_SWIFT["user"]["permissions"]["perm_canviewsubmitticket"] != "0") 


So this is not a bug and it's strange that you doesn't see the view ticket widget (did you modified this part of the code?)

I'll try to make this modification, if it's not already done.





No one for the problem with the email queue??

[Siora]

Well currently I disabled all widgets except for the register and news widget for my guest group. When I visit my site i only see those two widgets and I did not modify the code.

[Sheep]

Originally Posted by Siora

Well currently I disabled all widgets except for the register and news widget for my guest group. When I visit my site i only see those two widgets and I did not modify the code.

so that's where there is a missundersting
I'm working with a REGISTERED user logged in with "show submit ticket" disabled
So this a Feature Request But i'll do it myself after i fix bugs.

[Siora]

it shouldn't matter whether it is the guest group or registered group. Let me test it with my registered group and see what i come up with.

EDIT: You're right, I turned off all my settings for the registered group and the "view tickets" widget still appears. I think that is a bug since it is not functioning as it is supposed to. I would submit a bug report.

[Sheep]

That's not a bug as the registered user might have tickets oppened by the staff. So the view widget is still here to show em but the user won't be able to open a new one. (FEATURE: but it should be upgraded by hiding the widget if the user has no tickets opened by the staff)
BUT: the bug comes with the emailqueue, if this user sends an email in the queue, then a ticket get created as he's registered. The queue doesnt' check his group permission. (the BUG i'm pointing out since the beginin )

[Siora]

Originally Posted by Sheep

That's not a bug as the registered user might have tickets oppened by the staff. So the view widget is still here to show em but the user won't be able to open a new one. (FEATURE: but it should be upgraded by hiding the widget if the user has no tickets opened by the staff)
BUT: the bug comes with the emailqueue, if this user sends an email in the queue, then a ticket get created as he's registered. The queue doesnt' check his group permission. (the BUG i'm pointing out since the beginin )

I see what you mean, okay I'll step out of your way. Thanks for clearing that up.