[rt-users] security issue

2010-03-29 Thread Tariq Doukkali
Hi all, if an unprivileged user click a link to open a ticket, the link below will be shown on browser as URL-address: https://company.com/SelfService/Display.html?id=493 but if the user try to copy and past this url-adress in an other browser-tab and changes id to 490 as shown below,

Re: [rt-users] Sending html mails using web interface

2010-03-29 Thread Kevin Falcone
On Mon, Mar 29, 2010 at 10:27:45AM +0530, Praveen C wrote: All mail sends using templates. It sounds like your correspondence templates are not html Thanks for your reply. Can you help me to enable this ?? Apply the documentation in docs/templates.pod to your Correspondence

Re: [rt-users] CommandByMail hide commands

2010-03-29 Thread polloxx
It seems like the requestor receives mail sent to rt-comment. Or is this a option I can disable? On Tue, Mar 23, 2010 at 7:06 PM, Kenneth Marshall k...@rice.edu wrote: The comment address is the mail to RT that is only sent to admins and adminccs and not requestors or ccs. The default is

Re: [rt-users] security issue

2010-03-29 Thread Torsten Brumm
Hi, think this is a config error at your installation, tried it out just in my installation and all i get is: No permission to display that ticket RT Rights Setup is really clean and good! Possibly the requestor of Ticket 490 is the same like for ticket 493 ?? Torsten 2010/3/29 Tariq Doukkali

Re: [rt-users] CommandByMail hide commands

2010-03-29 Thread Kenneth Marshall
This does not happen out of the box. Comments only go to AdminCc's and not the Requestor. This sounds like a local modification, either to make requestors AdminCc's or to send comments to requestors. Check your Scrips. Cheers, Ken On Mon, Mar 29, 2010 at 02:30:45PM +0100, polloxx wrote: It

Re: [rt-users] CommandByMail only listening to commands issued by privileged users

2010-03-29 Thread Kenneth Marshall
Bad, bad, bad, bad idea. Did I mention that this is a bad idea? :) Seriously, the CommandByMail gives a lot of access to the internals of your RT system. It can totally subvert your workflow. Imagine a generic E-mail that can close or delete any ticket in the system. What are you trying to

[rt-users] Problem with custom Template

2010-03-29 Thread Brian Lawson
Still a newbie. Using RT 3.8.2 I've been playing around with making an OnOwnerChangeNotifyOwner scrip and I am having parsing errors. I am using just a NotifyOwner Action with a custom template with the stage as TransactionCreate. Here is my template: To: { my $old_owner =

Re: [rt-users] Problem with custom Template

2010-03-29 Thread Brian Lawson
Thanks for pointing that out! All is working now! -Brian -Original Message- From: Potla, Ashish Bassaliel [mailto:c_apo...@qualcomm.com] Sent: Monday, March 29, 2010 10:11 AM To: Brian Lawson Subject: RE: Problem with custom Template Isnt there supposed to be a 'new' keyword somewhere?

Re: [rt-users] RT Scrip doesn't work

2010-03-29 Thread Wagner Pereira
Hi, Kenn. My scrip should send an e-mail to user when a ticket were created. It's configured like this (using the default shipped with RT): Description: Ticket open - AutoReply Condition: OnCreate Action: AutoReply to Requestors Template: global model - AutoReply Stage: TransactionCreate

Re: [rt-users] How do I edit RT System's saved searches?

2010-03-29 Thread Jesse Vincent
On Sun, Mar 28, 2010 at 05:10:40PM -0400, Todd Chapman wrote: All, I remember being able to do it once but can't figure it out. I do have SuperUser privs so that isn't the problem. IIRC, I can do this when logged in as root. Thanks! Discover RT's hidden secrets with RT Essentials

Re: [rt-users] How do I edit RT System's saved searches?

2010-03-29 Thread Todd Chapman
I think this was the case at one time but I don't think so know. To clarify, I'm referring to the ones installed from /etc/initialdata. On Mon, Mar 29, 2010 at 4:06 PM, Jesse Vincent je...@bestpractical.com wrote: On Sun, Mar 28, 2010 at 05:10:40PM -0400, Todd Chapman wrote: All, I

Re: [rt-users] How do I edit RT System's saved searches?

2010-03-29 Thread Kevin Falcone
On Mon, Mar 29, 2010 at 04:18:24PM -0400, Todd Chapman wrote: I think this was the case at one time but I don't think so know. To clarify, I'm referring to the ones installed from /etc/initialdata. You can definitely edit searches when logged in as root and clicking on the Edit link on the

Re: [rt-users] Sending html mails using web interface

2010-03-29 Thread Jason A. Smith
One thing you may have to watch out for, that initially got me and went unnoticed for quite a while. At the bottom of the template you usually have something like this: {$Transaction-Content()} You will want to change to be: {$Transaction-Content(Type = 'text/html')} RT internally handles the

Re: [rt-users] How do I edit RT System's saved searches?

2010-03-29 Thread Todd Chapman
On Mon, Mar 29, 2010 at 4:30 PM, Kevin Falcone falc...@bestpractical.com wrote: On Mon, Mar 29, 2010 at 04:18:24PM -0400, Todd Chapman wrote: I think this was the case at one time but I don't think so know. To clarify, I'm referring to the ones installed from /etc/initialdata. You can

[rt-users] RT Survey plugin

2010-03-29 Thread Elton S. Fenner
Hi, I installed RT and I'm very happy with the result. I have about 2,500 tickets a month around 100 people working on 20 queues. Installed Active Directory authentication and many other plugins. Now I want to go further. I was googling to find a Survey plugin. I want to send a message to

[rt-users] Another Stupid Question

2010-03-29 Thread Brian Lawson
Can you set up RT to log to multiple files? All the examples I've seen look like you can only set one type of log level to log to a file. -Brian This communication, together with any attachments hereto or links contained herein, is for the sole use of the intended recipient(s) and may

Re: [rt-users] RT Survey plugin

2010-03-29 Thread Todd Chapman
You could just have the resolved template include a link to a survey monkey. http://www.surveymonkey.com/ On Mon, Mar 29, 2010 at 5:15 PM, Elton S. Fenner elton.fen...@al.rs.gov.br wrote: Hi, I installed RT and I'm very happy with the result. I have about 2,500 tickets a month around 100

Re: [rt-users] How do I edit RT System's saved searches?

2010-03-29 Thread Kevin Falcone
On Mon, Mar 29, 2010 at 05:04:35PM -0400, Todd Chapman wrote: On Mon, Mar 29, 2010 at 4:30 PM, Kevin Falcone falc...@bestpractical.com wrote: On Mon, Mar 29, 2010 at 04:18:24PM -0400, Todd Chapman wrote: I think this was the case at one time but I don't think so know. To clarify, I'm

Re: [rt-users] Another Stupid Question

2010-03-29 Thread Kevin Falcone
On Mon, Mar 29, 2010 at 04:46:01PM -0500, Brian Lawson wrote: Can you set up RT to log to multiple files? All the examples I've seen look like you can only set one type of log level to log to a file. Just log to syslog or screen and have syslog/apache do filtering -kevin

[rt-users] Howto: Pseudo read-only custom fields

2010-03-29 Thread Jeff Blaine
Just sharing. This is how I disabled editing of certain custom fields via the web UI. Part 1: Make the word READONLY appear in your custom field's description. Part 2: Edit share/html/Tickets/Elements/EditCustomFields (or whatever proper 'local' file :)) to look like this

Re: [rt-users] Howto: Pseudo read-only custom fields

2010-03-29 Thread Jesse Vincent
On Mon, Mar 29, 2010 at 06:50:27PM -0400, Jeff Blaine wrote: Just sharing. This is how I disabled editing of certain custom fields via the web UI. Part 1: Make the word READONLY appear in your custom field's description. Part 2: Edit

Re: [rt-users] How do I edit RT System's saved searches?

2010-03-29 Thread Todd Chapman
On Mon, Mar 29, 2010 at 6:08 PM, Kevin Falcone falc...@bestpractical.com wrote: On Mon, Mar 29, 2010 at 05:04:35PM -0400, Todd Chapman wrote: On Mon, Mar 29, 2010 at 4:30 PM, Kevin Falcone falc...@bestpractical.com wrote: On Mon, Mar 29, 2010 at 04:18:24PM -0400, Todd Chapman wrote: I think

Re: [rt-users] Howto: Pseudo read-only custom fields

2010-03-29 Thread Jeff Blaine
On 3/29/2010 7:04 PM, Jesse Vincent wrote: On Mon, Mar 29, 2010 at 06:50:27PM -0400, Jeff Blaine wrote: Just sharing. This is how I disabled editing of certain custom fields via the web UI. Part 1: Make the word READONLY appear in your custom field's description. Part 2: Edit