Application Release Version:
25.01.2

Database Version:
1.8.0

When assigning tickets, I'm still getting the full list of users instead of technicians/admins. I've cleared my browser cache and even tried using a different browser in "private" mode with the same results.

    Hey so this morning i was working with a ticket and when looking to Assign to me i see almost everyone of my customers listed. This was not like this before the update yesterday.

    Merged 1 post from User accounts -- Security .

    wrongecho

    I was unable to reproduce the error in the Development environment.

    The tickets existed prior to the hotfix experience the issue as well as new tickets. All current tickets are email parsed. If I create a new ticket, it shows only admins and technicians in the ticket creation dialog. If I leave it unassigned, or submit a new ticket via email parsing, I get the full list of users in the ticket assignment dialog. I tried this on different clients with the same result. Also, when assigning a technician, I'm seeing contacts across all sites (I'm seeing contacts for a different site under the list and not just for the site I'm assigning for.) I'm also noticing anyone who has an ITFlow account (technican/admin) and a contact shows twice in this list with no way to differentiate between the contact or ITFlow account.

    root@itflow:/var/www/itflow.domain.org# git status

    On branch master

    Your branch is up to date with 'origin/master'.

    Changes not staged for commit:

    (use "git add <file>..." to update what will be committed)

    (use "git restore <file>..." to discard changes in working directory)

    modified: uploads/clients/index.php

    modified: uploads/expenses/index.php

    modified: uploads/index.php

    modified: uploads/settings/index.php

    modified: uploads/tickets/index.php

    modified: uploads/tmp/index.php

    modified: uploads/users/index.php

    Untracked files:

    (use "git add <file>..." to include in what will be committed)

    cron.bkp

    cron_ticket_email_parser.bkp

    login.bkp

    portal/

    post/ticket.bkp

    post/ticket.new

    post/user.bkp

    no changes added to commit (use "git add" and/or "git commit -a")

      wrongecho No dev is good but its hard to tell it looks like the contracts showing up after the update was done its fine its anything before.

        ruggedit

        I'm getting the same. Contacts prior to the update show in the list, but newly created contacts don't show.

        klockemy

        cron.bkp

        cron_ticket_email_parser.bkp

        login.bkp

        portal/

        post/ticket.bkp

        post/ticket.new

        post/user.bkp

        What are these?

        @ruggedit Thanks for sending that across! 🙂. There's a weird bug with the SQL query - it's missing a WHERE, but we somehow haven't noticed on any of our dev or prod stuff. I will push out a hotfix shortly.

        To clarify, this does not affect authentication. All your contacts have a user_type of 2 which means client portal rather than technician portal. Overmore, even if they did have a user_type of 1, they can't actually do anything in the tech portal without a role. It's just a bug in the ticket assign modal.

        -

        ruggedit Regarding the invoice, don't include the currency in the price - it should be numbers only. The currency should be either set globally (unsure if it properly respects the per-client currency setting atm, but that's a separate issue…).

          wrongecho

          I tried both but now it worked today is nuts so i am in a hurry i think i jacked that one up