Repository navigation
Response To Issue 262
#262 is a thoughtful list from pappas81, who runs a small business giving remote support to other small businesses. That is a different shape from an internal IT department, and it shows up exactly the places where FreeITSM assumes one. Thank you - every item was checked against the code before deciding.
This page is the full answer: what each item turned out to be, which ones are going in (each with its own issue to follow), and the few that are not, with the reasons.
| # | Item | Verdict | Issue |
|---|---|---|---|
| 1 | Dragging a task on the board sends no notifications | β Bug, confirmed - fixed (write-up) | #266 |
| 2 | Pages do not refresh when somebody else changes something | β Real gap | #267 |
| 3 | Workflow "Add a note" only shows in the history | β Works as designed, but misleading - changing it | #268 |
| 4 | Mail: mark as read and leave it in the folder | β Built | #269 |
| 5 | Mail: copy sent mail to the Sent folder | β Going in (Basic IMAP) | #270 |
| 6 | Checklists: the same step types on tickets as on tasks | β Going in | #271 |
| 7 | Forms on tickets | β Going in | #272 |
| 8 | Checklists in the API | β Going in | #273 |
| 9 | Workflows for tasks (e.g. task done β note on its ticket) | β Going in | #274 |
| 10 | API fields as workflow variables | β Built - works in every action now | #275 |
| 11 | Watch / get involved from the right-click menu | β Tasks: built - tickets designed next | #276, #277 |
| 12 | A customer / business entity | πΆ Yes, on Companies - not a separate record | #279 |
| 13 | Calculated fields | πΆ Partly - the "set a field" action is built; live outside lookups no | #278 |
| - | Found while answering: the duplicate-email check scans every email | β Fixed (write-up) | #280 |
1. Dragging a task sends no notifications - confirmed (#266)
Exactly as reported. Changing a task's status from its menu, the right-click menu or the detail panel goes through the task service, which tells the workflow engine - and the engine sends the bell notifications, emails and workflows. Dragging on the board saves through a different, older path that never tells the engine. So no notification, no workflow and no calendar update. The REST API's "move" had the same gap, and the API docs even called it deliberate. It is not: a task finished by dragging should behave like one finished any other way.
2. Nothing refreshes by itself - a real gap (#267)
It is not a PHP limitation - the bell already proves FreeITSM can poll. The ticket list does refresh every minute, but only when new mail or a new note arrives: a colleague changing a status, priority or assignee does not trigger it. An open email ticket never refreshes, and the tasks board has no refresh at all. The fix keeps the same simple polling (nothing new to install) and widens what counts as "something changed", without ever wiping a half-written reply.
3. "Add a note to the ticket" only lands in the history - by design, but changing (#268)
This one is working as it was built: the action writes to the ticket's history, and the documentation says so. But the name promises a note, and the issue-tracker sample makes it look like one - so it should write a real note (labelled System), with an option to keep today's behaviour so no existing workflow changes on upgrade.
- Mail: mark as read and leave it (#269). The machinery already exists - FreeITSM can already mark mail read on every kind of mailbox, it just was not offered for imported mail. Two honest caveats go on the screen: mail somebody opens in Thunderbird before FreeITSM collects it is skipped (collection is by "unread"), and switching it on for a mailbox full of old unread mail imports that backlog. And on 15,000 messages: the folder size itself is not the problem - the server answers "which are unread" from its own index - but the duplicate check on FreeITSM's side was, which is #280.
- Mail: copy sent mail to the Sent folder (#270). Microsoft 365 and Gmail already do this; it is only missing for Basic IMAP. It will be off by default, per mailbox, because some mail servers already file sent mail themselves and you would get two copies.
- Checklists on tickets like checklists on tasks (#271). The difference is real and was deliberate when tickets got checklists first - the pass / fail / not applicable step came later, for tasks. Tickets will move onto the same checklist engine.
- Forms on tickets (#272). Agreed: a two-minute data-entry step should not need a task. Tickets get forms the way tasks have them, optionally required before closing.
- Checklists in the API (#273). Read endpoints first, after #271 so both sides return the same shape.
- Workflows for tasks (#274). The task triggers already exist (task created, status changed, completed and more). What stopped "task done β note on its ticket" was three things: the drag bug (#266), the note going to history (#268), and the task's ticket not being in the trigger's data - plus there are no actions that change a task yet. All four are covered.
-
API fields as variables (#275). Mostly there already:
{{ticket.requester.email}}, array indexes like{{steps.1.ticket_id}}and earlier steps' results all work. The whole API-shaped record ({{task.full}}) is only filled inside webhooks today; it will be available to every action, so{{task.full.ticket_id}}works anywhere. - Involve me from the right-click menu (#276). Small, for tasks. Watching a ticket (#277) is bigger - tickets have no watcher idea at all yet - so it has its own design first.
- A "set a field" workflow action (#278) - see calculated fields below.
The customer / business entity - yes, but on Companies (#279)
The need is clear and reasonable: about 3,000 customer businesses, each identified by its tax ID (AFM), kept in step from an ERP or CRM that stays the source of truth.
What is not going in: a separate "customer" record beside Companies. In FreeITSM a Company is not just a label - it decides what each analyst may see. A second, lighter "customer" with its own idea of who belongs to whom would be a second definition of company, and two definitions that mostly agree is how one customer's data leaks into another's. The People roadmap explains this in more detail: Why not a separate Contacts module? The Manager structure is not the answer either - it describes people, not businesses.
What is going in: Companies grow what they were missing.
- an outside reference and a tax ID on each company;
- create and update companies through the API, with "create or update by outside reference" so an ERP sync is one call per customer;
- custom fields on companies (and people), on the same engine ticket fields already use;
- the person's outside reference visible and searchable through the API.
On the worries in the request: per-company ticket numbering is optional - the default numbering is one sequence for everybody, so 3,000 companies add nothing there. What does need checking is how the company screens behave with 3,000 entries, and that is part of the issue. Customers on Gmail addresses already work through the person's record; the issue includes checking that incoming mail always finds the company from the person, not the email domain.
Related: One company supporting another (#228) - built this week - lets a support company work tickets for the companies it supports, which fits this kind of business.
Calculated fields - partly (#278)
Three different ideas were in this request, with three answers:
-
A field worked out from other fields - yes, as a workflow action. A Set a field action fills a custom field from text with
{{placeholders}}, so a workflow on "ticket created" or "field changed" can work one value out from others. That covers most cases without inventing a formula language. -
A field filled from an ERP or CRM - already possible. The outside system pushes the value in through the REST API (
custom_fieldson tickets today, companies with #279). The ERP stays the source of truth, which is what the request asked for. - Proper formula fields are already designed as the Calculated question in Financial approvals - design (#160), worked out on the server and frozen with the answer. They will come from there rather than a second design.
What is not going in: a field that calls an outside system live, while a record is being saved. Every save would wait on somebody else's server - slow or down means FreeITSM is slow or stuck - and a URL an administrator can point anywhere is a way to make FreeITSM request internal addresses it should never reach. FreeITSM's webhooks are a queue for exactly that reason. The same goes for a workflow action that calls an API and uses its answer in later steps: it is a reasonable idea, but it needs its own careful design (timeouts, retries, and refusing internal addresses), so it is not part of this round. Pushing data in through the API does the same job without the risk.
Some of these will land in the next release and some later; each issue says what it involves. If anything here misunderstands what was meant, say so on #262 or on the issue itself.
FreeITSM β an open-source IT Service Management platform Β· github.com/edmozley/freeitsm Β· MIT licence
- Installation
- β° Scheduled tasks (cron jobs)
-
Architecture
- β³ π§Ή Root folder tidy (URL routing)
- β³ π Database Integrity (FKs & constraints)
- β³ π οΈ Database Verification β Developer Guide
- β³ π§© Service Layer (UI + API share code)
- β³ πͺ€ Code traps (the TRAP: comments)
- β³ π Commenting for the Engineering wiki
- β³ π οΈ Engineering wiki scanner - Developer Guide
- β³ π Service-Layer progress
- π€ Contributing (read before a pull request)
- π§ͺ Developer tests
- π PDF exports moved to PDFKit (#254)
- AI Providers
- Internationalisation (i18n)
- Timezones & Time Handling
- π Date & Time Formats
- π± Currencies
- π§ The sidebar (optional module rail)
- π§© Preference templates
- π Display order (modules, Watchtower cards) β Developer Guide
- Theming & Dark Mode
- ποΈ Recent β getting back to what you were doing
- β¨οΈ Command palette (βK)
- π Searching inside tickets
- π Attached documents
-
MobileβFriendly
- β³ π« Mobile: Tickets
- β³ π» Mobile: Assets
- β³ π Mobile: Calendar
- β³ π Mobile: Knowledge
- β³ π¦ Mobile: Service Status
- β³ πΌ Mobile: Watchtower
- β³ π§© Mobile: Problem Management
- β³ π Mobile: Change Management
- β³ πΏ Mobile: Software
- β³ β Mobile: Tasks
- β³ π Mobile: Forms
- β³ π Mobile: Contracts
- β³ π Mobile: Domains
- β³ π Mobile: People
- β³ π Mobile: Projects
- β³ ποΈ Mobile: Files
- β³ π Mobile: LMS
- β³ πΊοΈ Mobile: CMDB
- β³ πΊοΈ Mobile: Network Mapper
- β³ π§ Mobile: Process Mapper
- β³ βοΈ Mobile: Workflow
- β³ π₯οΈ Mobile: System
- β³ π Mobile: Reporting
- β³ π Mobile: System Wiki
- β³ π Mobile: Self-Service Portal
- β³ π§° Mobile: Techniques & Tricks
-
Security
- Layer 1 β which modules you can enter
- β³ π§© Module Access Control
- β³ π οΈ Module Access β Developer Guide
- β³ π Switching modules off
- β³ π οΈ Module availability β Developer Guide
- β³ π Module availability β design (#217)
- Layer 2 β what you can administer
- β³ π Roles & Permissions
- β³ π οΈ Roles β Developer Guide
- β³ π€ Why capabilities are constants
- Layer 3 β the System module
- β³ π Admin Access Control
- Hardening
- β³ π Security review response 2026-08
- β³ π‘οΈ Security hardening 2026-08
- β³ π οΈ Security hardening 2026-08 β Developer Guide
- β³ π‘οΈ Round three β plain English
- β³ π οΈ Round three β Developer Guide
- β³ π‘οΈ CSRF protection (S4) β Developer Guide
- Single Sign-On (SSO)
- ποΈ LDAP & Active Directory
-
π¦ Microsoft Entra ID
- β³ π₯ Importing people and groups
- β³ π» Intune: assets to their primary user
- β³ π’ Organisation chart
- β³ π οΈ Entra directory sync β Developer Guide
- β³ π οΈ Entra import - review (#235)
- β³ π οΈ Entra follow-ups - review (#237-#240)
- β³ π οΈ Intune primary user - review (#236)
- β³ π οΈ Organisation chart - reviews (#242, #265)
- π CardDAV contact sync
- Browser Extension
- API Reference
-
π REST API β how it works
- β³ π Proposal: custom fields, inventory import and change evidence (#194)
- β³ π οΈ Custom fields, evidence + inventory - review (#195-#197)
- β³ π οΈ Long forms in a task's Work view - review (#198)
- β³ π οΈ Empty Procedures fold - review (#247)
- β³ π« REST API: Tickets
- β³ π» REST API: Assets
- β³ π΄ REST API: Problems
- β³ π REST API: Changes
- β³ π REST API: Knowledge
- β³ β REST API: Tasks
- β³ ποΈ REST API: CMDB
- β³ π REST API: Contracts
- β³ ποΈ REST API: Calendar
- β³ πΏ REST API: Software
- β³ π REST API: Domains
- β³ π¦ REST API: Service Status
- β³ βοΈ REST API: Morning Checks
- β³ π REST API: Forms
- β³ βοΈ REST API: Workflow
- β³ π·οΈ REST API: Cost centres
- β³ π§βπΌ REST API: Analysts
- β³ πΊοΈ REST API: Network Mapper
- β³ π§ Using the API docs page
- β³ π OpenAPI specification
- β³ β OpenAPI: kept correct
- β³ π οΈ Maintaining the catalogue
- Watchtower
-
Tickets
- β³ π οΈ Inbox.js map β Developer Guide
- β³ π οΈ Floating windows & the file viewer β Developer Guide
- β³ π οΈ Tickets settings β Developer Guide
- β³ π Simpler ticket and task forms - design (#218)
- β³ ποΈ The ticket workspace
- β³ π The ticket table
- β³ π Rota copy and paste β Developer Deep Dive
- β³ β Checklists & SOPs
- β³ βοΈ Mandatory fields
- β³ π§Ύ Custom ticket fields
- β³ π·οΈ Ticket categories
- β³ π§Ύ A type for every new ticket
- β³ π₯ Assigning tickets to a team, and escalation
- β³ π’ One board across every company
- β³ π Ticket dashboard β Developer Guide
- β³ Mailbox Authentication
- β³ π€ Email send log
- β³ π Attachment size limits and large emails
-
β³ Basic IMAP mailboxes
- β³ π Basic IMAP without the PHP extension (#257)
- β³ π οΈ Basic IMAP client β Developer Guide
- β³ π§ͺ Basic IMAP client β Testing and verifying
- β³ π οΈ Verifying a mail folder β Developer Guide
- β³ π οΈ Mailbox providers β Developer Guide
- β³ π οΈ How Gmail mail collection works β Developer Guide
- β³ Email rendering & images
- β³ SLA Management
- β³ WhatsApp channel
-
β³
βοΈ Telegram channel - β³ β CSAT company scope and filters β Developer Guide
- β³ π₯ Microsoft Teams channel
- β³ π¨οΈ Mattermost channel
- β³ π¬ Web chat channel
- β³ π£ Slack channel
- β³ π Linking tickets
- β³ β Record previews
- β³ π Ticket notes: internal or shared
- β³ ποΈ Canned responses
- β³ βοΈ Limiting replies to particular senders
- β³ π¨ Telling the analyst a ticket is theirs
- β³ βοΈ Email signatures
- β³ π The public web address
- β³ π’ Ticket numbering
- β³ π Raising a ticket for someone else
- β³ π Merging tickets
- β³ π Confidential tickets
- β³ π₯ Portal managers
- β³ π Who has seen a ticket
- β³ π Reading long tickets
- β³ β Splitting tickets
- β³ β Selecting several tickets
- β³ ποΈ The folder pane
- β³ π½ Just my tickets, or no closed ones
- β³ π οΈ Snoozing tickets β Developer Guide
- β³ π₯ Collision detection
- β³ β±οΈ Time tracking
- β³ π Case reports - a ticket and its work as one PDF
- β³ π Scheduled work in your own calendar
- Problem Management
-
Tasks
- β³ π οΈ Task board and subtasks β Developer Guide
- β³ π§βπ€βπ§ People on a task ("Involved")
- β³ π Repeating tasks
- β³ π’ Moving a task between companies
- π Projects
-
Assets
- β³ π’ Moving an asset between companies
- β³ π Shared asset locations
- β³ π§βπΌ Assigning assets to analysts
- β³ π Warranty and lease alerts
- β³ π Leases
- β³ π Saved table views
- β³ π¨οΈ Recording anything, and importing it
- β³ π§© Asset type layouts
- β³ π Inventory freshness
- β³ π Linked configuration item
- β³ π Connected assets
- β³ π Asset review
-
β³ π·οΈ QR asset labels
- β³ π οΈ QR asset labels β Developer Guide
- β³ π Asset label designer - design (#229)
- β³ π· Asset scanning β Developer Guide
- β³ π οΈ Asset tag numbering β Developer Guide
- β³ π οΈ Asset reconciliation β Developer Guide
- β³ π οΈ Reconciliation, tags + labels - review (#164)
- β³ π Who holds what, and handover documents
- β³ π₯οΈ The inventory agent (PowerShell)
- β³ ποΈ Proxmox VE servers
- β³ βοΈ VMware Cloud Director servers
- β³ πͺ Hyper-V and Failover Clusters
- β³ π Linking equipment to tickets
- β³ βοΈ Follow-up tasks on a ticket
- Knowledge
- Change Management
- Calendar
- Morning Checks
- Reporting
- Software
-
Forms
- β³ π¨ The form designer β Developer Guide
- β³ π Layout & the grid β Developer Guide
- β³ ποΈ Collections β grouping submissions
- β³ π Submissions as PDFs
- β³ β‘ What happens next β a form's own actions
- β³ π οΈ Sections & conditional logic β Developer Guide
- β³ π οΈ Lookup fields β Developer Guide
- β³ π‘οΈ Catalogue request approvals
- People
- Starters & leavers
- Domains
- ποΈ Files
- Contracts
- Service Status
- π Notifications
- π¨ War Room
- Self-Service Portal
- LMS
- Process Mapper
- CMDB
- Network Mapper
- Workflows
- Issue trackers (Jira, Azure DevOps)
- π‘ Zabbix (monitoring)
- π¬ Microsoft Teams alerts
- π 3CX (phone system)
-
System
- β³ π οΈ Preferences β Developer Guide
- β³ π Finding people in the Analysts list
- β³ πͺ When an analyst leaves
- β³ π οΈ System β Branding β Developer Guide
- β³ π©Ί Page health (D019) β Developer Guide
- β³ β Feature Bingo
- β³ π·οΈ Cost centres
- β³ π· Photo Album
- β³ Demo Data
- β³ π οΈ Demo Data β Developer Guide
-
Overview
- β³ π Progress tracker
- β³ Concepts & vocabulary
- β³ Email routing & mailboxes
- β³ Settings: global vs per-company
- β³ Users & self-service
- β³ Staff cross-company access
- β³ One company supporting another
- β³ π’ One board across every company
- β³ Worked examples
- β³ Pitfalls & gotchas
- β³ Scope: what it's for
- β³ π οΈ Developer Guide (make a module multi-company)
- β³ ποΈ Case study: CMDB (a linked graph)
- β³ π§ͺ Test harness (prove it's isolated)
- What this is
-
π Bugs resolved
- β³ π« #280 Email lookups scanned the whole table
- β³ β #266 Dragging a task told nobody
- β³ π #255 Article previews showed HTML codes
- β³ π #252 A link to a Knowledge article did not open
- β³ π #254 PDFs could not print Polish
- β³ π #250 Clicking a folder left the open article on screen
- β³ π« #260 The dashboard cog did nothing
- β³ π« #248 A department rule never matched on four routes
- β³ π A directory account could be matched to someone else
- β³ π« #244 Reply went to the assigned analyst
- β³ π A lookup answer could name any record
- β³ π« #227 A mailbox could not be deleted
- β³ π« #226 A picture on a note could not be closed
- β³ π» #222 The Assets page never loaded in 4.3.0
- β³ βοΈ #214 A "contains" condition did not match capitals
- β³ βοΈ #216 A workflow email from a chosen mailbox always failed
- β³ π³ The Docker image was missing PHP extensions
- β³ π A failed DNS lookup read as a missing record
- β³ π A link could change data
- β³ π Access outlived its removal
- β³ π Knowledge articles could run scripts
- β³ π Knowledge writes ignored permissions
- β³ π Company boundaries (Oct 2026)
- β³ π Smaller gaps (Oct 2026)
- β³ π Escaped text could leave its attribute
- β³ π Task descriptions were not cleaned
- β³ π Task documents ignored company scope
- β³ π Repeating tasks ignored company scope
- β³ π¬ #183 Mailbox checks overlapped
- β³ π #188 Transfer lock shown off when unknown
- β³ β #184 Subtask names and Overdue
- β³ π§© #186 Teams: the buttons did nothing
- β³ π Text in a change could run script
- β³ π AI settings changed without the AI permission
- β³ πͺ #178 Deleting an analyst failed
- β³ π« A team with no departments showed 0 tickets
- β³ π Projects: adding a phase did nothing on Save
- β³ π Leavers could still sign in
- β³ πΌοΈ Logo and courses broke on Apache with PHP-FPM
- β³ π’ Chat tickets ignored your ticket numbering
- β³ π Dates shown as a dash, or in server time
- β³ π Assets β Users showed people from other companies
- β³ π Restricted analysts could read other modules' data
- β³ πΌοΈ Replies with a picture in the thread failed to send
- β³ π Reply attachments never reached the customer
- β³ π οΈ Outbound email attachments β Developer Guide
- β³ π A global SSO provider was missing from the portal
- β³ π Behind a proxy, the SSO redirect said http
- β³ βοΈ The portal tagline moved when you saved it
- β³ π¨ The portal settings screen forgot what you saved
- β³ π‘οΈ The approvals inbox said "Error" and nothing else
- β³ π A table's answers were missing from the PDF
- β³ β A single-select column let you tick every option
- β³ π The portal ignored a form's field widths
- β³ π The tasks board stopped taking clicks
- β³ ποΈ #121 The index list is out of date after upgrading
- β³ π #133 The calendar subscription was empty
- β³ π #131 Tasks always reopened on the board
- β³ π₯ #129 Every page returned HTTP 500 after upgrading
- β³ π³ #127 A PHP warning above the System page
- β³ π #126 Notes stamped with the server's clock
- β³ π Storing every date in UTC
- β³ πͺ The portal was down for everyone signed in
- β³ βοΈ #120 Workflow notes could never be written
- β³ βοΈ #123 Three errors when running Database Verification
- β³ π #122 The description box was a stub in the corner
- β³ π£ Demo data deleted real accounts
- β³ π #117 Sign-in redirected to the wrong address
- β³ π¨ #108 The priority dot was invisible
- β³ β±οΈ #116 Time logged from the right-click menu
- β³ π #114 API keys refused by our own guard
- β³ ποΈ #110 Assigning a task told nobody
- β³ πͺ #107 Signed out while still working
- β³ π #103 "Share with Requester" reached nobody
- β³ π #102 Search found nothing for hyphens
- β³ πͺ #101 Source code editor opened behind
- β³ βοΈ #88 Subtasks could not be ticked off
- β³ π» #84 Asset deep link selected nothing
- β³ π« #79 A new ticket arrived with no status
- β³ π§ #79 A ticket from email did not say so
- β³ π #78 Bell opened to nothing
- β³ π¬ #77 Mail only collected from Inbox
- β³ π #74 The default password could not be changed
- β³ π¦ #70 Renaming an impact level
- β³ π€ #67 App-only mailboxes could not send
- β³ π #45 Verify only ever worked for Microsoft
- β³ π #45 IMAP reported as not authenticated
- β³ βοΈ An email template stopped escaping itself
- β³ π The portal dashboard showed the wrong time
- β³ π’ The folder said 99 and the list showed 96