Skip to content

Added new function to view all ticket transfers for a ticket - #87

Open
HenrikEngen wants to merge 3 commits into
masterfrom
feature/listAllTicketTransfers2
Open

Added new function to view all ticket transfers for a ticket#87
HenrikEngen wants to merge 3 commits into
masterfrom
feature/listAllTicketTransfers2

Conversation

@HenrikEngen

Copy link
Copy Markdown
Member

About this pull request

Let ticket admins and admins view all ticket transfers.

Dependencies

None

Prerequisites

@HenrikEngen
HenrikEngen requested a review from petterroea August 23, 2026 09:57
@HenrikEngen HenrikEngen self-assigned this Aug 23, 2026
@HenrikEngen HenrikEngen added the enhancement New feature or request label Aug 23, 2026
@HenrikEngen HenrikEngen changed the title Feature/list all ticket transfers2 Added new function to view all ticket transfers for a ticket Aug 23, 2026

@petterroea petterroea left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like security isn't set up here.

Comment thread phoenixRest/views/ticket/instance.py
}), status=403)

# Test to read transfer log for a ticket as privileged user, expects 200 (Security check) and one log entry (Functionality check)
transferlog_privileged = testapp.get('/ticket/%s/transfer_log' % transfer_ticket['ticket_id'], headers=dict({

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does everyone ever involved with the ticket see the ticket? Or only admins?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The full transferlog is meant to only be visible to administrators.
The "first" user should not be able to view the whole transfer chain, only the transfer between "first" and "second".

I believe the code is correct? Can you verify?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants