You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We have multiple task templates that will be automatically added to a ticket when our customers open a ticket in a specific template (Hardware-request for example). Wether they do so via the Forms plugin or by opening a normal ticket and choosing the template, the issue remains the same.
Those tasks are for the technicians to do, and the customer should only be able to see the progress.
However, the customers are now able to click the checkbox next to the tasks and mark them as done that way. Additionally, they can "edit" the task, but they can't save them.
When a technician inserts a task manually, the customers can't click on the check box, which is the expected behavior.
Side notes:
Our Self-Service profile set to the default settings, so the users should not be able to add or edit tasks.
Additionally we tried setting the "By" and the "Groups" field in the task template, but that doesn't change the behavior.
Relevant log output
No response
Page URL
No response
Steps To reproduce
Make a ticket template that adds tasks templates. As an end user, open a ticket in this category, you will now be able to ckeck the task as done.
Your GLPI setup information
Information about system installation & configuration
GLPI 10.0.15 ( => /var/www/html/glpi)
Installation mode: TARBALL
Current language:en_US
PHP version (8.3.6) is supported.
Sessions configuration is OK.
Allocated memory is sufficient.
mysqli extension is installed.
Following extensions are installed: dom, fileinfo, filter, libxml, json, simplexml, xmlreader, xmlwriter.
curl extension is installed.
gd extension is installed.
intl extension is installed.
zlib extension is installed.
The constant SODIUM_CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES is present.
Database engine version (10.11.8) is supported.
No files from previous GLPI version detected.
The log file has been created successfully.
Write access to /var/lib/glpi/_cache has been validated.
Write access to /var/lib/glpi/_cron has been validated.
Write access to /var/lib/glpi has been validated.
Write access to /var/lib/glpi/_dumps has been validated.
Write access to /var/lib/glpi/_graphs has been validated.
Write access to /var/lib/glpi/_lock has been validated.
Write access to /var/lib/glpi/_pictures has been validated.
Write access to /var/lib/glpi/_plugins has been validated.
Write access to /var/lib/glpi/_rss has been validated.
Write access to /var/lib/glpi/_sessions has been validated.
Write access to /var/lib/glpi/_tmp has been validated.
Write access to /var/lib/glpi/_uploads has been validated.
Web server root directory configuration seems safe.
PHP directive "session.cookie_secure" should be set to "on" when GLPI can be accessed on HTTPS protocol.
OS and PHP are relying on 64 bits integers.
exif extension is installed.
ldap extension is installed.
openssl extension is installed.
Following extensions are installed: bz2, Phar, zip.
Zend OPcache extension is installed.
Following extensions are installed: ctype, iconv, mbstring, sodium.
Write access to /var/www/html/glpi/marketplace has been validated.
Timezones seems loaded in database.
htmlawed/htmlawed version 1.2.14 in (/var/www/html/glpi/vendor/htmlawed/htmlawed)
phpmailer/phpmailer version 6.8.0 in (/var/www/html/glpi/vendor/phpmailer/phpmailer/src)
simplepie/simplepie version 1.5.8 in (/var/www/html/glpi/vendor/simplepie/simplepie/library)
tecnickcom/tcpdf version 6.7.5 in (/var/www/html/glpi/vendor/tecnickcom/tcpdf)
michelf/php-markdown in (/var/www/html/glpi/vendor/michelf/php-markdown/Michelf)
true/punycode in (/var/www/html/glpi/vendor/true/punycode/src)
iamcal/lib_autolink in (/var/www/html/glpi/vendor/iamcal/lib_autolink)
sabre/dav in (/var/www/html/glpi/vendor/sabre/dav/lib/DAV)
sabre/http in (/var/www/html/glpi/vendor/sabre/http/lib)
sabre/uri in (/var/www/html/glpi/vendor/sabre/uri/lib)
sabre/vobject in (/var/www/html/glpi/vendor/sabre/vobject/lib)
laminas/laminas-i18n in (/var/www/html/glpi/vendor/laminas/laminas-i18n/src)
laminas/laminas-servicemanager in (/var/www/html/glpi/vendor/laminas/laminas-servicemanager/src)
monolog/monolog in (/var/www/html/glpi/vendor/monolog/monolog/src/Monolog)
sebastian/diff in (/var/www/html/glpi/vendor/sebastian/diff/src)
donatj/phpuseragentparser in (/var/www/html/glpi/vendor/donatj/phpuseragentparser/src/UserAgent)
elvanto/litemoji in (/var/www/html/glpi/vendor/elvanto/litemoji/src)
symfony/console in (/var/www/html/glpi/vendor/symfony/console)
scssphp/scssphp in (/var/www/html/glpi/vendor/scssphp/scssphp/src)
laminas/laminas-mail in (/var/www/html/glpi/vendor/laminas/laminas-mail/src/Protocol)
laminas/laminas-mime in (/var/www/html/glpi/vendor/laminas/laminas-mime/src)
rlanvin/php-rrule in (/var/www/html/glpi/vendor/rlanvin/php-rrule/src)
ramsey/uuid in (/var/www/html/glpi/vendor/ramsey/uuid/src)
psr/log in (/var/www/html/glpi/vendor/psr/log/Psr/Log)
psr/simple-cache in (/var/www/html/glpi/vendor/psr/simple-cache/src)
psr/cache in (/var/www/html/glpi/vendor/psr/cache/src)
league/csv in (/var/www/html/glpi/vendor/league/csv/src)
mexitek/phpcolors in (/var/www/html/glpi/vendor/mexitek/phpcolors/src/Mexitek/PHPColors)
guzzlehttp/guzzle in (/var/www/html/glpi/vendor/guzzlehttp/guzzle/src)
guzzlehttp/psr7 in (/var/www/html/glpi/vendor/guzzlehttp/psr7/src)
glpi-project/inventory_format in (/var/www/html/glpi/vendor/glpi-project/inventory_format/lib/php)
wapmorgan/unified-archive in (/var/www/html/glpi/vendor/wapmorgan/unified-archive/src)
paragonie/sodium_compat in (/var/www/html/glpi/vendor/paragonie/sodium_compat/src)
symfony/cache in (/var/www/html/glpi/vendor/symfony/cache)
html2text/html2text in (/var/www/html/glpi/vendor/html2text/html2text/src)
symfony/css-selector in (/var/www/html/glpi/vendor/symfony/css-selector)
symfony/dom-crawler in (/var/www/html/glpi/vendor/symfony/dom-crawler)
twig/twig in (/var/www/html/glpi/vendor/twig/twig/src)
twig/string-extra in (/var/www/html/glpi/vendor/twig/string-extra)
symfony/polyfill-ctype not found
symfony/polyfill-iconv not found
symfony/polyfill-mbstring not found
symfony/polyfill-php80 not found
symfony/polyfill-php81 not found
symfony/polyfill-php82 in (/var/www/html/glpi/vendor/symfony/polyfill-php82)
league/oauth2-client in (/var/www/html/glpi/vendor/league/oauth2-client/src/Provider)
league/oauth2-google in (/var/www/html/glpi/vendor/league/oauth2-google/src/Provider)
thenetworg/oauth2-azure in (/var/www/html/glpi/vendor/thenetworg/oauth2-azure/src/Provider)
phpCas version 1.6.0 in (/usr/share/php/CAS/source)
I cannot recreate the issue. When the canUpdateItem check fails for tasks, the checkbox is disabled and the edit option is missing. Please test again with 10.0.16.
I updated to version 10.0.16, bit that didn't solve the issue.
What you describe is true for tasks that we as technicians add to a ticket. The author of the ticket cannot edit those in any way.
The tasks however that are added automatically via ticket templates can be checked as "done" by the author.
On the top right you can see that we are in the Profile "Self Service". We didn't touch the default profile settings (updating tasks is not allowed in this profile).
I hovered over the first task with the mouse, you can see the three dots for the edit mode an that I checked the box.
The tasks are inserted by the user "Self Service Test", because that user used the ticket template to create the ticket.
Also I have a screenshot for the Ticket history:
I hope you can find a way to reproduce this, because the automatic task insert funtion is great and almost perfect, but this bug makes it pretty uncrontrollable, because the user can mark the technician's tasks as done...
Code of Conduct
Is there an existing issue for this?
Version
10.0.15
Bug description
We have multiple task templates that will be automatically added to a ticket when our customers open a ticket in a specific template (Hardware-request for example). Wether they do so via the Forms plugin or by opening a normal ticket and choosing the template, the issue remains the same.
Those tasks are for the technicians to do, and the customer should only be able to see the progress.
However, the customers are now able to click the checkbox next to the tasks and mark them as done that way. Additionally, they can "edit" the task, but they can't save them.
When a technician inserts a task manually, the customers can't click on the check box, which is the expected behavior.
Side notes:
Our Self-Service profile set to the default settings, so the users should not be able to add or edit tasks.
Additionally we tried setting the "By" and the "Groups" field in the task template, but that doesn't change the behavior.
Relevant log output
No response
Page URL
No response
Steps To reproduce
Make a ticket template that adds tasks templates. As an end user, open a ticket in this category, you will now be able to ckeck the task as done.
Your GLPI setup information
Information about system installation & configuration
Server
GLPI constants
Libraries
Notifications
Plugins list
Anything else?
No response
The text was updated successfully, but these errors were encountered: