- May 07, 2018
-
-
aydreeihn authored
- In class.forms.php, $this->field->getClean() was null so $new was not populated and attachments were not being carried over, so we must get the fileIds directly from the form-data array - We need to unset the form-data for attachment fields (on tasks and tickets) so that the array is empty each time we try to create a task or ticket from a thread - We need to add files attached to threads where we are creating a task or ticket to the list of allowed files otherwise they will not carry over to new tasks/tickets (only files uploaded by this user in this session were allowed previously)
-
- May 03, 2018
-
-
aydreeihn authored
- On ticket edit, only display inactive help topic warning if the ticket has a help topic - Inline edit file save fix - Remove future search/filter criteria for datetime fields that can't be in the future - Fix calculations for 'next 7 days' and 'next 30 days'. They were selecting dates between now and n days AGO instead of between now and n days in the future
-
- May 01, 2018
- Apr 25, 2018
-
-
aydreeihn authored
- Save Filter Actions at the top of Filter::save - Validate the Filter Actions before commiting the save This is done to fix the issue where Depts/HT's said 'Unchanged' when initially saved. Now their configuration is set correctly before doing additional validations for active depts/hts
-
- Apr 24, 2018
-
-
aydreeihn authored
- change recipient name vars to 'Collaborator' in tmpls if ticket user isn't a recipient - for templates going to Bcc'd Collaborators, account for all name format variables that could be used - new function getNameFormats returns an array of all name formats in templates for staff.name.* or recipient.name.* - other minor cc/bcc fixes
-
- Apr 19, 2018
-
-
aydreeihn authored
This fix uses 'filter' instead of 'findFirst' for finding Dept and Team referrals since the __in operator is not included in the evaluate function that was being called when using 'findFirst'
-
- Apr 17, 2018
- Apr 10, 2018
-
-
aydreeihn authored
-
- Apr 09, 2018
-
-
aydreeihn authored
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
-
aydreeihn authored
-
Peter Rotich authored
Commit 3944b51d added ability to archive help topics and departments but failed to port changes default data (yaml files) loaded on install. This commits adds the correct bits to flags field for both help topics and departments. It also removes retired 'isactive' field for help topics.
-
Peter Rotich authored
This commits adds ability for agents to configure public queues. * Customize Columns * Set default sort & quick filter * Add supplemental filters (criteria) To support above features this commit also addresses confusing Advanced Search UI to make it intuitive when dealing with a Saved Queue vs. Saved Search vs. Adhoc Search
-
- Apr 05, 2018
-
-
aydreeihn authored
-
- Mar 29, 2018
-
-
aydreeihn authored
-
- Mar 28, 2018
-
-
aydreeihn authored
-
- Mar 24, 2018
-
-
Peter Rotich authored
This commit adds var_dump test along with a few enhancements on the test script.
-
Peter Rotich authored
Only ignore visibility constraints on private "searches" when staff is allowed to search the backend. Access control is strictly imposed on ALL queues including inherited private sub-queues.
-
Peter Rotich authored
-
- Mar 23, 2018
-
-
aydreeihn authored
-
- Mar 22, 2018
-
-
aydreeihn authored
-
Peter Rotich authored
-
JediKev authored
This addresses an issue where you can exploit XSS in the help-topic AJAX request. This adds a check for a refferal URL and if none it will return a 403 Forbidden Response.
-
JediKev authored
This addresses an issue where the CSRF Token is displayed in the URL when you preform a search in the Users Tab. This removes the token from the request which removes it from the URL.
-
aydreeihn authored
-
Andrew Peng authored
Updated to fix typo "information" on line 36
-
Peter Rotich authored
* Dont't fetch templates while in a loop * Tidy up the code
-
Peter Rotich authored
-
Peter Rotich authored
Commit c4579277 introduced an extra administrative security feature to restrict files access to signed in users only, even if a user has a valid & signed download URL. The feature, however, did not take into account public images & files associated with FAQs and pages such as landing/thank-you pages. This commit addresses the shortcoming by adding a reference ID (attachment ID) to the download/access URL, that can be used to deduce the model/object type that the file request is associated with. The technique will allow us in the future to enforce ACL at the file level depending on privacy settings and the security clearance of the user (agent).
-
Peter Rotich authored
-
Peter Rotich authored
Account for the possibility of agents being deleted
-
Peter Rotich authored
-
Peter Rotich authored
This commit adds user's account username as one of the field to scan on quick lookup;
-
Peter Rotich authored
-
Peter Rotich authored
Conflicts: include/upgrader/streams/core/934b8db8-ad9d0a5f.task.php
-