Tickets Fixed Tickets can be converted to threads in nodes where I do not have permission to view

SeToY

Well-Known Member
A user apparently sees all nodes when converting tickets to threads, even if the user has no permission to view the nodes. Tickets can also be "converted to" threads in those notes resulting in the converting user not being able to see the thread.
 

NixFifty

Administrator
Staff member
Thanks, good catch. For some reason, the XF function I'm using here defaults to not checking permissions which seems unexpected but fixed now.
 
Top