On Tue, 8 Jun 2004 11:27:42 +0200 "Robert Kehl" <[EMAIL PROTECTED]> wrote:
> On Monday, June 07, 2004 5:42 PM
> Stefan Berder <[EMAIL PROTECTED]> wrote:
> > I'm playing with OTRs for several days for now and I'm trying to set
> > the status via a special word match in the subject.
>
> The PostMaster filters and/or Procmail won't fit?
I'm using PostMaster filters right now
> > I know it's really a lack of security but is it possible to include
> > a X-OTRS-State check in Kernel/System/PostMaster/FollowUp.pm ?
>
> Explain a bit more in detail what you want to achieve to see if it
> weren't possible yet.
What I suppose after digging in the code is that in your processus, the
status change via X-OTRS-State is only possible in
Kernel/System/PostMaster/NewTicket.pm :
[EMAIL PROTECTED]:/opt/otrs$ grep -n X-OTRS-State
Kernel/System/PostMaster/NewTicket.pm
67: if ($GetParam{'X-OTRS-State'}) {
68: $State = $GetParam{'X-OTRS-State'};
[EMAIL PROTECTED]:~/opt/otrs$ grep -n X-OTRS-State
Kernel/System/PostMaster/FollowUp.pm
I just added the same 2 lines as in NexTicket.pm in FollowUp.pm, for now
it works correctly as this:
[EMAIL PROTECTED]:/opt/otrs$ grep -n X-OTRS-State
Kernel/System/PostMaster/FollowUp.pm
57: if ($GetParam{'X-OTRS-State'}) {
58: $State = $GetParam{'X-OTRS-State'};
My simple patch in attachment. As I told already, it's a potential
security flaw, maybe a user check based on email address as an agent
authentication could be added.
Stef
--
#=- Stefan Berder tel : 6 14 80 -=#
#=- Ing�nieur syst�me et r�seau 01 53 95 14 80 -=#
#=- TRANSPAC / CSIG-SIS-ISS mail : [EMAIL PROTECTED] -=#
#=- /(bb|[^b]{2})/ [EMAIL PROTECTED] -=#
otrs-1.2.3-01-FollowUp.patch
Description: Binary data
_______________________________________________ OTRS mailing list: dev - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/dev To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/dev
