Re: [rt-users] 3.8.x serious security issue with mixing sessions

2009-10-26 Thread Leonid Mamchenkov
Hi,

On Mon, Oct 26, 2009 at 14:58, Jesse Vincent  wrote:
> > User B was logged in on it's own computer at that time but with totally
> > different session id than three above (so I assume user A become user B with
> > some old session of user B).
>
> *nod*
>
> Has _anybody_ else been seeing this? With 3.8.6 or any other version of
> RT?

I saw this issue a few times on RT 3.8.2 .  However it doesn't happen
often, and I can't think of a way to catch it.  I believe, the issue
appeared after we upgraded from 3.6.5 .

--
Leonid Mamchenkov
___
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sa...@bestpractical.com


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com


Re: [rt-users] Ideas on best way to do this?

2008-02-24 Thread Leonid Mamchenkov
Greg,

On Wed, Feb 20, 2008 at 8:34 PM, Greg Evans <[EMAIL PROTECTED]> wrote:
>  All of my users are in our radius file, which is great and I am pretty sure
>  that I can figure out how to import them from that using standard mySQL
>  syntax and a exported .csv or similar file.
>
>  The problem that was brought to my attention is that I would need to do this
>  daily. Is there a way that you or someone would know of that would allow me
>  to import only the new data each day?
>
>  Please remember, I am not much of a programmer, but I would like to see if
>  this is possible and maybe an example if someone knows how to do it :)

If you will find a way to import your data into RT once, there is, of
course, a way to do this daily.  Assuming that your data is in some
text format (like .csv file), you could use GNU diff to find out the
differences between two text files (one for yesterday and one for
today).  The output of GNU diff is very easy to parse and act upon.
(hint: when using this tool, go for unified diff output - it's even
easier to parse).

-- 
Leonid Mamchenkov
http://mamchenkov.net
___
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com


Re: [rt-users] Ideas on best way to do this?

2008-02-06 Thread Leonid Mamchenkov
Ruslan,

On Feb 7, 2008 1:31 AM, Ruslan Zakirov <[EMAIL PROTECTED]> wrote:
> What we have:
> * User has Organization field
> * RT has support for searches like "Requestor.Organization = 'X'"
>
> What you have to do:
> * maintain users' field
> * replace "More about X" box with "More about X's company Y"

Thanks a lot for your reply.  That gives so much to think about!  I'll
definitely dig deeper into it too.

-- 
Leonid Mamchenkov
http://mamchenkov.net
___
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com


Re: [rt-users] Ideas on best way to do this?

2008-02-05 Thread Leonid Mamchenkov
Hello,

On Feb 5, 2008 7:11 PM, Mike Peachey <[EMAIL PROTECTED]> wrote:
> It certainly doesn't seem to make sense, why use the requestor's first
> ticket as a reference point instead of the requestor account itself?
[...]
> Perhaps if you explained why you were looking at doing it this way - an
> idea as to what you are trying to accomplish..

One of the scenarios I can think about (actually one that I am
interested in myself) is when you have a number of clients (company
information with several individuals, phone numbers, etc).  You create
a ticket for each each client with some custom fields to store
additional information.  Then all requests from the client are created
as child tickets, so that you can have a clear picture of what's going
on by looking at the links of the client ticket.

-- 
Leonid Mamchenkov
___
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com


Re: [rt-users] Attachments over a few hundred KB not working

2008-02-03 Thread Leonid Mamchenkov
Hi,

On Feb 3, 2008 7:54 AM, Sevan / Venture37 <[EMAIL PROTECTED]> wrote:
> the only thing that appears in the apache error log is:
> [Sun Feb  3 05:46:56 2008] [crit]: Transaction not committed. Usually 
> indicates a software fault.Data loss may have occurred 
> (/usr/local/rt3/lib/RT/Interface/Web/Handler.pm:195)
>
>
> This is on a fresh install of FreeBSD 7.0-RC1 & RT 3.63 from ports using 
> mysql & apache 1.3

I recently had a somewhat similar problem, which was mostly affecting
MSIE users of RT.  This discussion helped to  solve the problem:
http://www.gossamer-threads.com/lists/rt/users/55296

-- 
Leonid Mamchenkov
http://mamchenkov.net
___
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: [EMAIL PROTECTED]


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com