Skip to content
Snippets Groups Projects
  1. Aug 06, 2018
    • aydreeihn's avatar
      Team Referral Check · 92844554
      aydreeihn authored
      This commit adds an additional check for Team referrals in the isReferred method so that it is handled in the same way Staff and Departments are handled.
      92844554
    • aydreeihn's avatar
      Referral Assignment Issue: · f9c955d7
      aydreeihn authored
      This commit fixes an issue where referrals were being considered successfully saved even if that referral already existed, resulting in multiple thread events for the same referral.
      
      Instead, if we find that the thread is already referred to the referee, refer should return false so that an error message is displayed stating that we were unable to refer the ticket.
      f9c955d7
  2. Aug 01, 2018
    • JediKev's avatar
      issue: Deleted FieVld Thread Events · 9ab2317e
      JediKev authored
      This addresses an issue where deleting a field and all it's data will
      delete the form field record in the database causing all events containing
      the field to crash the ticket page.
      9ab2317e
  3. Jul 30, 2018
    • JediKev's avatar
      issue: TextThreadEntryBody Sanitize · cec8be8e
      JediKev authored
      This addresses an issue introduced with a3d896c8 where TextThreadEntryBodies
      are not keeping their new line characters causing the email format to appear
      wonky. This balances the entry and then htmlchars it to ensure no XSS.
      cec8be8e
  4. Jul 23, 2018
    • aydreeihn's avatar
      Collaborator Fixes: · a4de3514
      aydreeihn authored
      - Fix for ‘creating default object from empty value’ message
      - Add collaborators in the Ticket::create function instead of Ticket::open so that we can getRecipients in postMessage function
      - Add relevant thread_entry_recipients in postMessage function for front end tickets (scp or Web Portal)
      
      Note: This in turn fixes Issue #4354
      a4de3514
    • aydreeihn's avatar
      Recipients Icon + View Email Recipients for Users · 8c707b5d
      aydreeihn authored
      This commit puts the recipient icon (for one recipient or multiple) on Thread Entries created by Users. It also stores email recipients so you can view them in the Thread Entry Actions.
      
      For Emails:
      All recipients in the email are tracked
      
      For front end entries:
      All recipients who received an alert are tracked
      8c707b5d
  5. Jul 20, 2018
    • JediKev's avatar
      issue: TextThreadEntryBody Sanitize · d8abe105
      JediKev authored
      This addresses an issue introduced with a3d896c8 where TextThreadEntryBodies
      are not keeping their new line characters causing the email format to appear
      wonky. This balances the entry and then htmlchars it to ensure no XSS.
      d8abe105
  6. Jul 19, 2018
    • JediKev's avatar
      thread: getId On Non-Object · e3b333ed
      JediKev authored
      This addresses issue 4347 where opening a ticket without an initial message
      for the User and replying to it as an agent, fatally errors. This is because
      osTicket does not check if there is a last message before getting the ID
      from it. So it tries to lookup the ID of a non-object therefore fatally
      erroring out.
      e3b333ed
    • aydreeihn's avatar
      Collaborator Thread Event for Web Portal: · dc9f4327
      aydreeihn authored
      This commit makes it so that Users are able to see all Thread Events that pertain to a Collaborator being added to the Ticket.
      dc9f4327
  7. Jul 18, 2018
    • aydreeihn's avatar
      Email Recipients Revisited Corrections · 731c9fe9
      aydreeihn authored
      - Clean up/correct notifyCollaborators function
      - Make sure function calls are passing in all needed variables
      - getContact function added to EmailRecipient class to properly set up email notifications
      - Corrections on encoding recipients for thread entries
      731c9fe9
  8. Jul 17, 2018
    • JediKev's avatar
      security: Fix Multiple XSS Vulnerabilies · 4b8ee133
      JediKev authored
      It may be possible to steal or manipulate customer session and cookies,
      which might be used to impersonate a legitimate user, allowing the hacker to
      view or alter user records, and to perform transactions as that user.
      Sanitation of hazardous characters was not performed correctly on user
      input.
      
      osTicket did not properly sanitize array values in `Format::htmlchars()`.
      Some values in the Admin Interface were not properly sanitized and returned
      to the response.
      4b8ee133
    • JediKev's avatar
      issue: Auto-Assignment Log · d4262cef
      JediKev authored
      This addresses an issue on the Forums where the Auto-Assignment Thread
      Event (configurable via Help Topic) uses the Email of the User rather than
      the User’s Name. This adds the correct function to retrieve the User’s
      Name if the User has an Account.
      d4262cef
  9. Jul 16, 2018
  10. Jul 13, 2018
    • aydreeihn's avatar
      Revisiting Collaborator: · 4c46f9f5
      aydreeihn authored
      - Ticket View UI changes
      - Mailer logic improvements
      - Ticket Open consolidated for mailer changes
      4c46f9f5
    • JediKev's avatar
      security: Fix Multiple XSS Vulnerabilies · a3d896c8
      JediKev authored
      It may be possible to steal or manipulate customer session and cookies,
      which might be used to impersonate a legitimate user, allowing the hacker to
      view or alter user records, and to perform transactions as that user.
      Sanitation of hazardous characters was not performed correctly on user
      input.
      
      osTicket did not properly sanitize array values in `Format::htmlchars()`.
      Some values in the Admin Interface were not properly sanitized and returned
      to the response.
      a3d896c8
  11. Jul 11, 2018
    • aydreeihn's avatar
      remove unused variable, posterType · 00e9811d
      aydreeihn authored
      00e9811d
    • JediKev's avatar
      feature: Release Role Permission · d354e095
      JediKev authored
      This feature adds a new Role permission called Release. This permission
      (if Enabled) allows an Agent to release ticket assignment. This permission
      is configurable for each and every Role in the helpdesk. This also keeps
      current functionality where Department Managers do not need the Role
      Permission in order to release tickets. In addition to the permission,
      this feature adds a new Release modal giving the option to choose who to
      release assignment from (Agent/Team/Both). This also adds a comment box to
      the release modal to optionally enter a reason for releasing assignment.
      Lastly, this adds a Release Thread Event so an event is logged showing who
      released who’s assignment.
      d354e095
  12. Jul 06, 2018
  13. Jun 07, 2018
    • JediKev's avatar
      issue: Auto-Assignment Log · e4329513
      JediKev authored
      This addresses an issue on the Forums where the Auto-Assignment Thread
      Event (configurable via Help Topic) uses the Email of the User rather than
      the User’s Name. This adds the correct function to retrieve the User’s
      Name if the User has an Account.
      e4329513
  14. Jun 05, 2018
    • aydreeihn's avatar
      This commit completely removes the BCC functionality. · d93089b3
      aydreeihn authored
      This means Agents can no longer choose to add a BCC User while creating or responding to a Ticket.
      
      This also means that if a User emails in a Ticket where someone is BCC'd, the Ticket will be created without the BCC'd User(s).
      
      If an email is sent where the Department email is BCC'd, a Ticket is created for that Department and other Users in the email are added as Collaborators.
      
      This also changes the response options for Agents. They now have the options to:
      - Reply All (User + Collaborators)
      - Reply to User (only the User)
      - Do not Email Reply
      
      (Previously the options were Reply All, Reply to User, Reply to CC + User, Reply to BCC, Do not Email Reply)
      d93089b3
  15. May 25, 2018
    • aydreeihn's avatar
      New Ticket UI Changes + Some Post Reply UI Changes · cccc6217
      aydreeihn authored
      New Ticket UI:
      - Clean up recipient section (adding user and collaborators)
      - Give agents the option of who to send the new ticket alert to:
      	- Alert to All
      	- Alert to User
      	- Alert to CC + User
      	- Alert to BCC
      	- Do not send an Alert
      - Added option of adding new Users for cc/bcc section using the 'Add New' button
      
      Post Reply UI:
      - Instead of having to type to get the option of adding a new user in the cc/bcc boxes, put an Add New button
      - Clean up Add New routine
      	- Now when adding a new collaborator using the Add New button, the User's name will appear in the cc or bcc box as specified and the Agent can go ahead and write their reply rather than pulling up the manage collaborators popup and forcing the agent to have to save the collaborator changes before being able to type a reply
      - Change the option "Reply to Collaborators" to "Reply to CC + User" to avoid confusion
      cccc6217
  16. May 22, 2018
    • aydreeihn's avatar
      This commit modifies the UI for Post Reply when an Agent views a Ticket. · 7a29022d
      aydreeihn authored
      - Change To dropdown to have different reply types
      	- Reply to All
      	- Reply to User
      	- Reply to Collaborators
      	- Reply to BCC
      - Add a help tip for the new reply types
      - Set the reply type selected based on the last user respondent
      	- Reply to Collaborator by default or if the last message is from the ticket user or a CC collaborator
      	- Reply to BCC if the last message is from a BCC user
      - Put User, CC, and Bcc fields below and indented as appropriate (User field is readonly)
      - Add a new flag to Agent responses to show which reply type they selected. Put the flag on Agent thread entries
      7a29022d
  17. May 15, 2018
    • aydreeihn's avatar
      Creating Tasks/Tickets from Thread: · 01323881
      aydreeihn authored
      When a Task or Ticket is created from a Thread, this code
      adds the functionality to create an Internal Note in the
      new Ticket or Task as well as the original Ticker or
      Task to show the activity that happened.
      01323881
  18. Apr 19, 2018
  19. Apr 17, 2018
  20. Mar 24, 2018
  21. Mar 20, 2018
  22. Mar 15, 2018
  23. Feb 25, 2018
    • Peter Rotich's avatar
      Department Referral via email · b7fee361
      Peter Rotich authored
      Add support auto email-based auto-referral. This will happen if an email is
      sent to multiple departments. For example an email with TO: support &  CC:
      billing will result in the ticket getting routed to "support" department and
      "billing" getting a referral of the same ticket. This allows both departments
      to have visibility of the ticket - which is not possible at the moment.
      b7fee361
    • Peter Rotich's avatar
      Check Thread Referral · 6df5f053
      Peter Rotich authored
      Move referral checking to thread class
      6df5f053
  24. Dec 17, 2017
    • Peter Rotich's avatar
      Check Thread Referral · 81edb54e
      Peter Rotich authored
      Move referral checking to thread class
      81edb54e
    • Peter Rotich's avatar
      Add Ticket Referral on Assignment / Transfer · a61642ed
      Peter Rotich authored
      Refer ticket to current assignee on reassignment
      Refer ticket to current department on transfer
      a61642ed
    • Peter Rotich's avatar
      Thread Referral · 6ab63563
      Peter Rotich authored
      Add the initial concept of thread (tickets & tasks) referral.
      
      * Agent & Team
      Referring a ticket to an agent or team - is just like assignment without
      actually assigning. If referred agent doesn't have access to the ticket's
      department then they'll only have view access.
      
      * Department
      This is like assigning a ticket to the entire department. Meaning agents who
      have access to the referred to department will now see the ticket - what
      they can do with the ticket will depend on the assigned role in that
      particular department.
      
      It's important to note the ticket will technically be still the
      responsibility of the primary department. Transferring the ticket is the
      sure way to relinquishing the responsibility.
      
      * Auto Department Referral via email
      This will happen if an email is sent to multiple departments. For example an
      email with TO: support &  CC: billing will result in the ticket getting
      routed to "support" department and "billing" getting a referral of the same
      ticket. This allows both departments to have visibility of the ticket -
      which is not possible at the moment.
      6ab63563
    • aydreeihn's avatar
      d496b10f
    • aydreeihn's avatar
      new branch with bcc/cc and security updates · c4fe7260
      aydreeihn authored
      c4fe7260
  25. Dec 14, 2017
  26. Dec 13, 2017
    • Peter Rotich's avatar
      Thread Referral · 523dc8d6
      Peter Rotich authored
      Add the initial concept of thread (tickets & tasks) referral.
      
      * Agent & Team
      Referring a ticket to an agent or team - is just like assignment without
      actually assigning. If referred agent doesn't have access to the ticket's
      department then they'll only have view access.
      
      * Department
      This is like assigning a ticket to the entire department. Meaning agents who
      have access to the referred to department will now see the ticket - what
      they can do with the ticket will depend on the assigned role in that
      particular department.
      
      It's important to note the ticket will technically be still the
      responsibility of the primary department. Transferring the ticket is the
      sure way to relinquishing the responsibility.
      
      * Auto Department Referral via email
      This will happen if an email is sent to multiple departments. For example an
      email with TO: support &  CC: billing will result in the ticket getting
      routed to "support" department and "billing" getting a referral of the same
      ticket. This allows both departments to have visibility of the ticket -
      which is not possible at the moment.
      523dc8d6
  27. Nov 06, 2017
  28. Oct 30, 2017
Loading