- Oct 14, 2015
-
-
Peter Rotich authored
Include collaborated tickets Pagenate user and org tickets listing Add ability to export tickets
-
- Oct 09, 2015
-
-
Jared Hancock authored
MySql 5.6 and MariaDB 10 will return affected_rows == 0 if updating a row to its current values. Therefore, if an object is "edited", but none of the CDATA is modified, then the CDATA table might be dropped and rebuilt.
-
- Oct 03, 2015
-
-
Jared Hancock authored
This fixes a security issue where, by crafting a special POST request to the client open.php page, an (unauthenticated) user could get a URL link to access to any attachment already uploaded in the system by guessing or brute-forcing the file's ID number. This patch addresses the issue by registering the uploaded file's ID in the current user's session. When processing the list of file ID's attached to the FileUploadField, the files must already have been attached to the field or have been newly attached in the current session. Fixes #2615 References: "Security issue - Download attachments submitted by others" https://github.com/osTicket/osTicket-1.8/issues/2615
-
Peter Rotich authored
Fixes a bug where a lock icon is shown on tickets listing even when the lock in question is expired.
-
- Sep 29, 2015
-
-
Jared Hancock authored
As currently written, if a full text query is attempted in BOOLEAN mode and the query cannot be compiled by MySQL, it causes an OrmException and a crash. This patch adds a more straight-forward and comprehensive grammer-based approach to checking for valid boolean syntax.
-
Jared Hancock authored
... and some of the related models are null.
-
- Sep 28, 2015
-
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
Disable sorting on ThreadEntry::email_info__mid lookups for email processing which results in an on-disk temporary table.
-
Jared Hancock authored
Load and cache all the attachments on a thread prior to rendering the items. That removes the need to run a query per thread item to check for- and fetch attachments.
-
Jared Hancock authored
This patch changes the automatic GROUP BY clause for annotations in the ORM including aggregate queries (like COUNT), by allowing the query to specify "distinct" fields. If distinct fields are specified, then no other fields are automatically added to the GROUP BY clause of the compiled query. This will likely only be supported by MySQL, as other engines and the ANSI standard require all non-aggregate fields in the SELECT clause to be present in the GROUP BY clause.
-
Jared Hancock authored
-
Jared Hancock authored
If the configuration for the file backend is set to something invalid, do a better job of falling back to database-backed attachments.
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
- Sep 26, 2015
-
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
This feature allows (by option) an organization to allow its members to see tickets from other members. It can be used beside or instead of the automated collaboration feature. Now, collaborators retain access to tickets on which they participate; however, sharing can be used to enable access to other tickets owned by their organization.
-
Jared Hancock authored
-
- Sep 25, 2015
-
-
Nathan Febuary authored
-
jdelhome3578 authored
include @greezybacon suggestion on fix
-
jdelhome3578 authored
Fixes #2350 in `develop`
-
Jared Hancock authored
-
Jared Hancock authored
-
Jared Hancock authored
-
- Sep 22, 2015
-
-
Jared Hancock authored
-
Jared Hancock authored
-