Bug #300
User can view any ticket from whmcs account
| Status: | Resolved | Start date: | 01 Oct 2013 | |
|---|---|---|---|---|
| Priority: | High | Due date: | ||
| Assignee: | - | % Done: | 0% |
|
| Category: | - | |||
| Target version: | - |
Description
Hello,
We faced with issue, customer from whmcs clientarea can view all tickets ,
If user know ticket ID it's will be possible to view other customers ticket
Screen_Shot_2013-10-22_at_1.21.18_PM.png (33.2 kB)
History
Updated by Damien Burke over 11 years ago
I am not able to reproduce this issue.
It seems that I get "We are sorry, but you have no permission to view this ticket." notice when attempting to access other tickets.
Updated by Vitaliy over 11 years ago
When I open ticket from whmcs in the browser i see link like https://mybillingsite/viewticket.php?ticketid=1369109
And if i change ticketid to add some +1 like https://mybillingsite/viewticket.php?ticketid=1369110 i can view it but this ticket doesn't assign to this customer :)
Updated by Vitaliy over 11 years ago
Let me give you access to our billing system and you can see the problem.
Updated by Amarjeet Kaur over 11 years ago
- File Screen_Shot_2013-10-22_at_1.21.18_PM.png added
Hi Vitaly,
We have resolved this issue in last uploaded build "v01.00.02".
Kindly check the attached screenshot with respective error message.
Thank you,
Amarjeet Kaur
Updated by Vitaliy over 11 years ago
Hi,
Yes it help.
Thank you.
Updated by Mansi Wason about 11 years ago
- Status changed from New to Closed
Updated by Mansi Wason about 11 years ago
- Status changed from Closed to Resolved