diff --git a/CHANGELOG.md b/CHANGELOG.md index 3078808c..e62ab9cf 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,8 @@ This file documents all notable changes made to ITFlow. - Asset Transfer: Fix. - Ticket Listing: Restrict Tickets presented in ticket list view from client restricted agents. - Ticket Details: Deny access to client restricted agents to view tickets without client_id in uri. +- Tickets: Allow agents with restricted client access to view and edit tickets without a client. +- Ticket Change client: Limit selection for agents with restricted client access. ### New Features & Updates - Report: Added Client Detail Auditing. diff --git a/agent/modals/ticket/ticket_edit.php b/agent/modals/ticket/ticket_edit.php index d5556765..871d5c3b 100644 --- a/agent/modals/ticket/ticket_edit.php +++ b/agent/modals/ticket/ticket_edit.php @@ -2,9 +2,9 @@ require_once '../../../includes/modal_header.php'; -// Ticket client access overide +// Ticket client access overide - This is the only way to show tickets without a client to agents with restricted client access $access_permission_query_overide = ''; -if (!empty($client_access_string)) { +if ($client_access_string) { $access_permission_query_overide = "AND ticket_client_id IN (0,$client_access_string)"; } diff --git a/agent/ticket.php b/agent/ticket.php index c687db64..9cfdb419 100644 --- a/agent/ticket.php +++ b/agent/ticket.php @@ -9,9 +9,9 @@ if (isset($_GET['client_id'])) { $client_url = ''; } -// Ticket client access overide +// Ticket client access overide - This is the only way to show tickets without a client to agents with restricted client access $access_permission_query_overide = ''; -if (!empty($client_access_string)) { +if ($client_access_string) { $access_permission_query_overide = "AND ticket_client_id IN (0,$client_access_string)"; } @@ -356,11 +356,10 @@ if (isset($_GET['ticket_id'])) {