Repository navigation
Ticket Workspace Design
Status: proposal - nothing here is built yet. This page sets out how the ticket workspace proposed in pull request #206 should fit into FreeITSM, so the shape is agreed before the code is finished. Comments on the PR are welcome. The open decisions are in section 8.
The proposal, from PR #206 (by @Dr4inder):
"Working through a ticket can mean moving between its conversation, properties and a separate task window. This proposes an optional Workspace layout that keeps those activities together."
A ticket today is one long reading pane: the conversation, with the properties in a toolbar above it, and linked tasks opening in their own window. The workspace lays the same ticket out for working rather than reading: its properties in a column, and its conversation, its work (linked tasks, opened in place), its links, its time and SLA, and its history on tabs beside them.
Not every team wants that, and not every ticket needs it. A password reset is quicker in the reading pane; a server move with six linked tasks is easier in a workspace. So:
- An administrator decides whether the workspace is used at all, and if so whether every ticket can be a workspace or only the ones somebody turns into a workspace.
- Each analyst decides for themselves whether to use it, within what the administrator allows.
- Nothing changes on upgrade. The workspace is off until an administrator turns it on.
The PR also contains two other features - editing a linked task inside the ticket, and a paginated ticket table with a CSV export. Both are good ideas, and both are separate pieces of work, so they come after the workspace as their own pull requests (section 6).
The workspace is another way to draw the reading pane - not a new ticket page, and not a new place where ticket data is written.
- One renderer. The ticket's controls - status, priority, owner, the toolbar actions, the custom fields - are the existing ones, with the existing handlers and the existing server checks. The workspace arranges them; it never duplicates them, and it never writes anything the reading pane does not already write.
- The folder list and the message list do not change. Choosing a ticket opens it in the reading pane or the workspace; everything to the left of it behaves as it does today.
- The Messages / Inbox list choice stays independent of the workspace, as the PR already has it.
Tickets β Settings β General β Ticket workspace (ticket_workspace_mode), a dropdown:
| Choice | What happens |
|---|---|
| Off (the default) | No workspace anywhere. The preference below is hidden, and so is Make workspace. Exactly as FreeITSM is today |
| Only tickets turned into a workspace | A ticket opens as a workspace only once somebody has turned it into one. Every other ticket opens in the reading pane |
| Every ticket | Every ticket can open as a workspace |
Changing the setting changes nothing stored: a ticket turned into a workspace keeps that, so switching from Only tickets turned into a workspace to Off and back restores the same tickets.
Tickets β (the list's view menu) and System β Preferences β Tickets β Use the ticket workspace, an on/off switch (ticket_workspace), on by default. Shown only when the workspace is not Off.
| Install setting | Analyst's switch on | Analyst's switch off |
|---|---|---|
| Off | Reading pane | Reading pane |
| Only tickets turned into a workspace | Workspace for those tickets, reading pane for the rest | Reading pane for every ticket; a turned-into-a-workspace ticket shows a small Workspace badge, so they know a colleague is working it that way |
| Every ticket | Workspace | Reading pane |
The switch is personal: one analyst's choice never changes what another sees. It is part of the analyst's preferences, so a preference template (Preferences - Developer Guide) can set it for new analysts.
Only when the install setting is Only tickets turned into a workspace:
- More β Make workspace on a ticket, and More β Back to the reading pane on one that is already a workspace.
- It is a property of the ticket, not of the analyst - stored as
tickets.is_workspace(TINYINT NOT NULL DEFAULT 0) - so everyone who opens the ticket, with their switch on, gets the same layout. That is the point of making a ticket into a workspace: the people working it see it the same way. -
Who may do it: anyone who may change the ticket. It is written through
TicketsService::updateTicket(), so it is checked and audited like any other change (Workspace: on / off), and over the REST API it is aworkspaceboolean on the ticket. - It does not fire a workflow event: it changes how the ticket is shown, not anything about the work.
The layout the PR proposes, with the existing controls:
| Area | Contains |
|---|---|
| Header | The ticket number, subject, requester and the toolbar - Reply, Forward, Add note, Schedule, Checklist, Ask AI, More, Link to... - exactly as the reading pane has them |
| Properties column | Department, type, status, priority, sensitivity, owner, origin and the custom fields, grouped as Request and classification, Responsibility and Other properties |
| Conversation | The message thread, with every existing option (collapsing, quoting, split) |
| Work | The ticket's linked tasks. In the first version each opens in the task window, as today. Editing a task in place is the second pull request |
| Links | Linked equipment, CIs, problems, changes, projects and documents |
| Time and SLA | Time entries and the SLA clocks |
| History | The audit trail, loaded when the tab is opened |
On a phone the properties fold into a section under the conversation, as in the PR's narrow-layout screenshot, following the mobile techniques.
Unsaved work is protected as the PR does it: a reply draft, a pending save or a half-filled field is never lost by switching tab, ticket or layout.
| Order | Pull request | Contains | Depends on |
|---|---|---|---|
| 1 | The workspace | Sections 2 to 5: the install setting, the personal switch, Make workspace, the layout, and its tests | - |
| 2 | Tasks inside the ticket | The Work tab opening a linked task's own editor in place, as the PR's second screenshot shows - checklists, forms, procedures, subtasks, comments - with Open separately | 1 |
| 3 | The ticket table | The paginated, server-side table list with saved views, and its CSV export | - (but easier to review after 1) |
Each one is reviewed, merged and released on its own, so a problem in one never holds up the others. The second and third are already well thought through in the PR - especially the task bridge's checks on message origin and the server re-checking ticket and task access - and the design for them is mostly what the PR already does. Two things to settle for them:
- Tasks inside the ticket embeds the whole Tasks page in a frame. That works, but it means every change to the Tasks page also runs inside a ticket, so the PR should add a short section to the Tasks on tickets developer guide saying what the embedded page relies on.
- The ticket table's CSV export is a new way to take the whole filtered queue out of FreeITSM in one click. It should be a setting - Tickets β Settings β General β Who can export the ticket list (section 8, decision 2).
Taken from the Contributing guide, with the points that matter most for this change:
-
Based on current
main. The PR was branched from 3.14.0; main is now past 4.0.0, and four files conflict,tickets/index.phpamong them. - One feature per pull request (section 6).
-
No new SQL by text replacement. The PR adds the table's columns by
str_replace()on the inbox query. The next change to that query would make the replacement silently match nothing. The shared query should take the extra columns as a parameter instead - the move of the inbox query intoincludes/ticket_list.phpis otherwise a good one. -
One renderer, chosen when it renders. Moving the reading pane's controls after they are drawn ties the workspace to the reading pane's markup, so a later change to
inbox.jscould break the workspace without anything noticing. The render function should draw the controls into whichever layout is in use, and the Inbox.js developer guide should say how to add a control so it appears in both. -
House style: match the file you are in, keep the comments that explain why, and add a
TRAP:comment where the obvious change would be wrong. New strings go inlang/enonly. - Upgrades invisible: the install setting defaults to Off, and the new column is added by Database Verification and guarded until it exists.
- Tests: the PR's tests are a strength - keep them, add the three install settings and the personal switch to them, and give each a positive control.
| # | Decision | My recommendation |
|---|---|---|
| 1 | The personal switch's default when an administrator turns the workspace on | On. An administrator who turns it on for every ticket expects people to see it; anyone who prefers the reading pane turns it off once. |
| 2 | Who can export the ticket list as CSV (the third pull request) | A setting: Administrators only (the default), Anyone with Tickets, or Nobody. It is a bulk export of ticket data, so it starts narrow. |
| 3 | Whether Make workspace is offered in Every ticket mode | No. In that mode every ticket already is one, so a per-ticket switch would only confuse. The stored flag is kept for if the mode changes back. |
| 4 | Whether an analyst with the switch off sees the Workspace badge | Yes, so they know a colleague works that ticket in the workspace - without it changing their own layout. |
FreeITSM β an open-source IT Service Management platform Β· github.com/edmozley/freeitsm Β· MIT licence
- Installation
- β° Scheduled tasks (cron jobs)
-
Architecture
- β³ π§Ή Root folder tidy (URL routing)
- β³ π Database Integrity (FKs & constraints)
- β³ π οΈ Database Verification β Developer Guide
- β³ π§© Service Layer (UI + API share code)
- β³ πͺ€ Code traps (the TRAP: comments)
- β³ π Commenting for the Engineering wiki
- β³ π οΈ Engineering wiki scanner - Developer Guide
- β³ π Service-Layer progress
- π€ Contributing (read before a pull request)
- π§ͺ Developer tests
- AI Providers
- Internationalisation (i18n)
- Timezones & Time Handling
- π Date & Time Formats
- π± Currencies
- π§ The sidebar (optional module rail)
- π§© Preference templates
- π Display order (modules, Watchtower cards) β Developer Guide
- Theming & Dark Mode
- ποΈ Recent β getting back to what you were doing
- β¨οΈ Command palette (βK)
- π Searching inside tickets
- π Attached documents
-
MobileβFriendly
- β³ π« Mobile: Tickets
- β³ π» Mobile: Assets
- β³ π Mobile: Calendar
- β³ π Mobile: Knowledge
- β³ π¦ Mobile: Service Status
- β³ πΌ Mobile: Watchtower
- β³ π§© Mobile: Problem Management
- β³ π Mobile: Change Management
- β³ πΏ Mobile: Software
- β³ β Mobile: Tasks
- β³ π Mobile: Forms
- β³ π Mobile: Contracts
- β³ π Mobile: Domains
- β³ π Mobile: People
- β³ π Mobile: Projects
- β³ ποΈ Mobile: Files
- β³ π Mobile: LMS
- β³ πΊοΈ Mobile: CMDB
- β³ πΊοΈ Mobile: Network Mapper
- β³ π§ Mobile: Process Mapper
- β³ βοΈ Mobile: Workflow
- β³ π₯οΈ Mobile: System
- β³ π Mobile: Reporting
- β³ π Mobile: System Wiki
- β³ π Mobile: Self-Service Portal
- β³ π§° Mobile: Techniques & Tricks
-
Security
- Layer 1 β which modules you can enter
- β³ π§© Module Access Control
- β³ π οΈ Module Access β Developer Guide
- Layer 2 β what you can administer
- β³ π Roles & Permissions
- β³ π οΈ Roles β Developer Guide
- β³ π€ Why capabilities are constants
- Layer 3 β the System module
- β³ π Admin Access Control
- Hardening
- β³ π Security review response 2026-08
- β³ π‘οΈ Security hardening 2026-08
- β³ π οΈ Security hardening 2026-08 β Developer Guide
- β³ π‘οΈ Round three β plain English
- β³ π οΈ Round three β Developer Guide
- β³ π‘οΈ CSRF protection (S4) β Developer Guide
- Single Sign-On (SSO)
- ποΈ LDAP & Active Directory
- π CardDAV contact sync
- Browser Extension
- API Reference
-
π REST API β how it works
- β³ π Proposal: custom fields, inventory import and change evidence (#194)
- β³ π οΈ Custom fields, evidence + inventory - review (#195-#197)
- β³ π οΈ Long forms in a task's Work view - review (#198)
- β³ π« REST API: Tickets
- β³ π» REST API: Assets
- β³ π΄ REST API: Problems
- β³ π REST API: Changes
- β³ π REST API: Knowledge
- β³ β REST API: Tasks
- β³ ποΈ REST API: CMDB
- β³ π REST API: Contracts
- β³ ποΈ REST API: Calendar
- β³ πΏ REST API: Software
- β³ π REST API: Domains
- β³ π¦ REST API: Service Status
- β³ βοΈ REST API: Morning Checks
- β³ π REST API: Forms
- β³ βοΈ REST API: Workflow
- β³ π·οΈ REST API: Cost centres
- β³ π§βπΌ REST API: Analysts
- β³ πΊοΈ REST API: Network Mapper
- β³ π§ Using the API docs page
- β³ π OpenAPI specification
- β³ β OpenAPI: kept correct
- β³ π οΈ Maintaining the catalogue
- Watchtower
-
Tickets
- β³ π οΈ Inbox.js map β Developer Guide
- β³ π οΈ Tickets settings β Developer Guide
- β³ π Ticket workspace - design (PR #206)
- β³ π Rota copy and paste β Developer Deep Dive
- β³ β Checklists & SOPs
- β³ βοΈ Mandatory fields
- β³ π§Ύ Custom ticket fields
- β³ π·οΈ Ticket categories
- β³ π₯ Assigning tickets to a team, and escalation
- β³ π’ One board across every company
- β³ Mailbox Authentication
- β³ π€ Email send log
- β³ π Attachment size limits and large emails
- β³ Basic IMAP mailboxes
- β³ Email rendering & images
- β³ SLA Management
- β³ WhatsApp channel
-
β³
βοΈ Telegram channel - β³ β CSAT company scope and filters β Developer Guide
- β³ π₯ Microsoft Teams channel
- β³ π¨οΈ Mattermost channel
- β³ π¬ Web chat channel
- β³ π£ Slack channel
- β³ π Linking tickets
- β³ β Record previews
- β³ π Ticket notes: internal or shared
- β³ ποΈ Canned responses
- β³ βοΈ Limiting replies to particular senders
- β³ π¨ Telling the analyst a ticket is theirs
- β³ βοΈ Email signatures
- β³ π The public web address
- β³ π’ Ticket numbering
- β³ π Raising a ticket for someone else
- β³ π Merging tickets
- β³ π Confidential tickets
- β³ π₯ Portal managers
- β³ π Who has seen a ticket
- β³ π Reading long tickets
- β³ β Splitting tickets
- β³ β Selecting several tickets
- β³ ποΈ The folder pane
- β³ π½ Just my tickets, or no closed ones
- β³ π οΈ Snoozing tickets β Developer Guide
- β³ π₯ Collision detection
- β³ β±οΈ Time tracking
- β³ π Case reports - a ticket and its work as one PDF
- β³ π Scheduled work in your own calendar
- Problem Management
- Tasks
- π Projects
-
Assets
- β³ π’ Moving an asset between companies
- β³ π Shared asset locations
- β³ π§βπΌ Assigning assets to analysts
- β³ π Warranty and lease alerts
- β³ π Leases
- β³ π Saved table views
- β³ π¨οΈ Recording anything, and importing it
- β³ π§© Asset type layouts
- β³ π Inventory freshness
- β³ π Connected assets
- β³ π Asset review
- β³ π·οΈ QR asset labels
- β³ π Who holds what, and handover documents
- β³ π₯οΈ The inventory agent (PowerShell)
- β³ ποΈ Proxmox VE servers
- β³ βοΈ VMware Cloud Director servers
- β³ π Linking equipment to tickets
- β³ βοΈ Follow-up tasks on a ticket
- Knowledge
- Change Management
- Calendar
- Morning Checks
- Reporting
- Software
-
Forms
- β³ π¨ The form designer β Developer Guide
- β³ π Layout & the grid β Developer Guide
- β³ ποΈ Collections β grouping submissions
- β³ π Submissions as PDFs
- β³ β‘ What happens next β a form's own actions
- β³ π οΈ Sections & conditional logic β Developer Guide
- β³ π οΈ Lookup fields β Developer Guide
- β³ π‘οΈ Catalogue request approvals
- People
- Domains
- ποΈ Files
- Contracts
- Service Status
- π Notifications
- π¨ War Room
- Self-Service Portal
- LMS
- Process Mapper
- CMDB
- Network Mapper
- Workflows
- Issue trackers (Jira, Azure DevOps)
- π‘ Zabbix (monitoring)
- π¬ Microsoft Teams alerts
- π 3CX (phone system)
- System
-
Overview
- β³ π Progress tracker
- β³ Concepts & vocabulary
- β³ Email routing & mailboxes
- β³ Settings: global vs per-company
- β³ Users & self-service
- β³ Staff cross-company access
- β³ π’ One board across every company
- β³ Worked examples
- β³ Pitfalls & gotchas
- β³ Scope: what it's for
- β³ π οΈ Developer Guide (make a module multi-company)
- β³ ποΈ Case study: CMDB (a linked graph)
- β³ π§ͺ Test harness (prove it's isolated)
- What this is
-
π Bugs resolved
- β³ π³ The Docker image was missing PHP extensions
- β³ π A failed DNS lookup read as a missing record
- β³ π A link could change data
- β³ π Access outlived its removal
- β³ π Knowledge articles could run scripts
- β³ π Knowledge writes ignored permissions
- β³ π Company boundaries (Oct 2026)
- β³ π Smaller gaps (Oct 2026)
- β³ π Escaped text could leave its attribute
- β³ π Task descriptions were not cleaned
- β³ π Task documents ignored company scope
- β³ π Repeating tasks ignored company scope
- β³ π¬ #183 Mailbox checks overlapped
- β³ π #188 Transfer lock shown off when unknown
- β³ β #184 Subtask names and Overdue
- β³ π§© #186 Teams: the buttons did nothing
- β³ π Text in a change could run script
- β³ π AI settings changed without the AI permission
- β³ πͺ #178 Deleting an analyst failed
- β³ π« A team with no departments showed 0 tickets
- β³ π Projects: adding a phase did nothing on Save
- β³ π Leavers could still sign in
- β³ πΌοΈ Logo and courses broke on Apache with PHP-FPM
- β³ π’ Chat tickets ignored your ticket numbering
- β³ π Dates shown as a dash, or in server time
- β³ π Assets β Users showed people from other companies
- β³ π Restricted analysts could read other modules' data
- β³ πΌοΈ Replies with a picture in the thread failed to send
- β³ π Reply attachments never reached the customer
- β³ π οΈ Outbound email attachments β Developer Guide
- β³ π A global SSO provider was missing from the portal
- β³ π Behind a proxy, the SSO redirect said http
- β³ βοΈ The portal tagline moved when you saved it
- β³ π¨ The portal settings screen forgot what you saved
- β³ π‘οΈ The approvals inbox said "Error" and nothing else
- β³ π A table's answers were missing from the PDF
- β³ β A single-select column let you tick every option
- β³ π The portal ignored a form's field widths
- β³ π The tasks board stopped taking clicks
- β³ ποΈ #121 The index list is out of date after upgrading
- β³ π #133 The calendar subscription was empty
- β³ π #131 Tasks always reopened on the board
- β³ π₯ #129 Every page returned HTTP 500 after upgrading
- β³ π³ #127 A PHP warning above the System page
- β³ π #126 Notes stamped with the server's clock
- β³ π Storing every date in UTC
- β³ πͺ The portal was down for everyone signed in
- β³ βοΈ #120 Workflow notes could never be written
- β³ βοΈ #123 Three errors when running Database Verification
- β³ π #122 The description box was a stub in the corner
- β³ π£ Demo data deleted real accounts
- β³ π #117 Sign-in redirected to the wrong address
- β³ π¨ #108 The priority dot was invisible
- β³ β±οΈ #116 Time logged from the right-click menu
- β³ π #114 API keys refused by our own guard
- β³ ποΈ #110 Assigning a task told nobody
- β³ πͺ #107 Signed out while still working
- β³ π #103 "Share with Requester" reached nobody
- β³ π #102 Search found nothing for hyphens
- β³ πͺ #101 Source code editor opened behind
- β³ βοΈ #88 Subtasks could not be ticked off
- β³ π» #84 Asset deep link selected nothing
- β³ π« #79 A new ticket arrived with no status
- β³ π§ #79 A ticket from email did not say so
- β³ π #78 Bell opened to nothing
- β³ π¬ #77 Mail only collected from Inbox
- β³ π #74 The default password could not be changed
- β³ π¦ #70 Renaming an impact level
- β³ π€ #67 App-only mailboxes could not send
- β³ π #45 Verify only ever worked for Microsoft
- β³ π #45 IMAP reported as not authenticated
- β³ βοΈ An email template stopped escaping itself
- β³ π The portal dashboard showed the wrong time
- β³ π’ The folder said 99 and the list showed 96