Tickets Fixed Tickets can be converted to threads in nodes where I do not have permission to view

SeToY

Member
A user apparently sees all nodes when converting tickets to threads, even if the user has no permission to view the nodes. Tickets can also be "converted to" threads in those notes resulting in the converting user not being able to see the thread.
 
Thanks, good catch. For some reason, the XF function I'm using here defaults to not checking permissions which seems unexpected but fixed now.
 
Back
Top