Support

Akeeba Ticket System

#21821 Answer to guests' post by support staff overrides the owner of tickets

Posted in ‘Akeeba Ticket System for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Akeeba Ticket System version
n/a

Latest post by nicholas on Thursday, 08 January 2015 08:57 CST

Radek Suski
 Hi guys,

I have following problem: when a guest opened a ticket and the supporter answers to the ticket, the ticket's author is being changed to supporter.
The result is that the guest cannot write/answer in this ticket anymore.

Any idea what the problem could be?

Regards,
Radek

nicholas
Akeeba Staff
Manager
ATS was never designed to allow (or even support) guests to file tickets. Every ticket is linked to a user ID. The guest has a user ID of 0 which is the standard PHP empty value for integer fields. This means that saving the record with a user ID 0 triggers the Table's code which tries to auto-assign the user ID to the ticket. If we remove that code then all tickets will be owned by user ID 0 which is a gigantic bug.

Moreover, a lot of features depend on ATS knowing the non-zero user ID. For example, a user can see all tickets owned by his own user ID no matter if they are public or private. By allowing guests to file tickets it means that anyone can see anyone else's tickets as long as they know the ticket number. Since ticket numbers are sequential it's not that hard. You understand that this is a major privacy issue, hence us not supporting guest tickets.

Another feature tied to the user ID are attachments. Again, if someone knows the ticket ID or the attachment ID they can download all guests' attachments. Same thing with sequential IDs applies.

You should require all users to go through Joomla!'s user registration before submitting a ticket. We NEED a non-zero user ID to protect the privacy of users filing tickets in ATS.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Radek Suski
Hey, if it wasn't supposed to work that way, you shouldn't allow to configure it that way :P
Never mind. I'll go around it ;)

Regards,
Radek

PS: Thanks for your time :)

nicholas
Akeeba Staff
Manager
We want to refactor ATS at some point. Right now we can't prevent guests filing tickets without screwing up other aspects of the software. But refactoring ATS requires having a good support for database object relations. Which requires me to write FOF 3 first. Which required Davide to complete the Unit Tests for AWF which will be the basis of the FOF 3 code and me to write UT for the code I've already started refactoring from FOF 2. It's day 3 of me writing UT for the refactored code. At this rate ATS refactor will be complete in a year or so...

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!