Skip to content
Permalink
Browse files
FIX user without permission can set ticket subject
  • Loading branch information
eldy committed Sep 18, 2021
1 parent 052511d commit facd6abec3e221ff784d5255b4767fb41339e16a
Showing with 1 addition and 1 deletion.
  1. +1 −1 htdocs/ticket/card.php
@@ -492,7 +492,7 @@
}
}

if ($action == 'setsubject') {
if ($action == 'setsubject' && $user->rights->ticket->write) {
if ($object->fetch(GETPOST('id', 'int'))) {
if ($action == 'setsubject') {
$object->subject = GETPOST('subject', 'alphanohtml');

0 comments on commit facd6ab

Please sign in to comment.