Hi Mike,

Instead of increasing the Assignee Group field length could you get away
with using computed groups?

For example say a ticket for a certain type of issue needs to be seen by
groups A,B,C,D,E,F,G,H,I,J. You could create a computed group that includes
all of those groups and just set the Assignee Group field to computed group
instead of all of the groups. I have not had the honor of working with ITSM
7 yet so I am not sure if this is feasible or how much customization it
would take.

Jason

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Axton
Sent: Wednesday, July 04, 2007 6:31 AM
To: [email protected]
Subject: Re: Assignee Group field length limit

Multiple people have extended the field beyond 255 chars, but I
wouldn't recommend doing that.  Remedy seems to use character arrays
with c functions like strcpy, strcat, etc.  It would be better if they
used calls like strncpy, strncat, and the likes, but it's an old code
base.  The header files define the assignee group at 255 characters,
and I can only assume that the structs used to store information on
the server side use these defines for character buffers, but if these
calls are used to write to a buffer, you get into buffer overflow
problems which can lead to one or more problems:
- corrupted memory (random server crashes and other unexpected behavior)
- potential for buffer overflow exploits (execution of arbitrary shell
code on the server); may have to pull out a noop slide and see if I
can write to an executable region of memory on various platforms.

Axton Grams

On 7/3/07, Mike Balogh <[EMAIL PROTECTED]> wrote:
> **
>
> Hi all -
>
> I'm currently implementing a system on ARS 7.01 (SQL 2005 backend) which
> calls for the security of row-level access to records on certain forms.
> Some records may need to be accessed by quite a few groups or users, which
> is becoming a problem due to the length limit of 255 characters on field
> 112, Assignee Group.
>
> I've done some initial testing with Assignee Group expanded to 512
> characters and it seems to work fine.  However, I'm hesitant to say that
it
> will work perfectly without asking around first due to the multiple places
> within Remedy documentation that it states the field length limit of 255.
>
> Has anyone tried expanding this field beyond 255?  If so, how big did you
> go?  And did you experience security or other issues?
>
> Thanks in advance,
> ~Mike
>
> ---
> Michael J Balogh
> Wingspan Systems Inc.
> [EMAIL PROTECTED]
>
>   __20060125_______________________This posting was
> submitted with HTML in it___

____________________________________________________________________________
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the
Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the 
Answers Are"

Reply via email to