
Hi dev team, I'm playing with OTRs for several days for now and I'm trying to set the status via a special word match in the subject. I know it's really a lack of security but is it possible to include a X-OTRS-State check in Kernel/System/PostMaster/FollowUp.pm ? In the worse case I'll use my own cvs to propagate my modifications to the new versions of code. Of course I'd prefer not to modify the code, so I won't haev to patch the sources on each new version ... Stefan -- #=- Stefan Berder tel : 6 14 80 -=# #=- Ingénieur système et réseau 01 53 95 14 80 -=# #=- TRANSPAC / CSIG-SIS-ISS mail : sbe@oleane.net -=# #=- /(bb|[^b]{2})/ stefan.berder@francetelecom.com -=#

On Monday, June 07, 2004 5:42 PM
Stefan Berder
I'm playing with OTRs for several days for now and I'm trying to set the status via a special word match in the subject.
The PostMaster filters and/or Procmail won't fit?
I know it's really a lack of security but is it possible to include a X-OTRS-State check in Kernel/System/PostMaster/FollowUp.pm ?
Explain a bit more in detail what you want to achieve to see if it weren't possible yet. Regards, Robert Kehl -- ((otrs.de)) :: OTRS GmbH :: Norsk-Data-Str. 1 :: 61352 Bad Homburg http://www.otrs.de/ :: Tel. +49 (0)6172 4832388

On Tue, 8 Jun 2004 11:27:42 +0200
"Robert Kehl"
On Monday, June 07, 2004 5:42 PM Stefan Berder
wrote: I'm playing with OTRs for several days for now and I'm trying to set the status via a special word match in the subject.
The PostMaster filters and/or Procmail won't fit?
I'm using PostMaster filters right now
I know it's really a lack of security but is it possible to include a X-OTRS-State check in Kernel/System/PostMaster/FollowUp.pm ?
Explain a bit more in detail what you want to achieve to see if it weren't possible yet.
What I suppose after digging in the code is that in your processus, the status change via X-OTRS-State is only possible in Kernel/System/PostMaster/NewTicket.pm : sbe@burger:/opt/otrs$ grep -n X-OTRS-State Kernel/System/PostMaster/NewTicket.pm 67: if ($GetParam{'X-OTRS-State'}) { 68: $State = $GetParam{'X-OTRS-State'}; sbe@burger:~/opt/otrs$ grep -n X-OTRS-State Kernel/System/PostMaster/FollowUp.pm I just added the same 2 lines as in NexTicket.pm in FollowUp.pm, for now it works correctly as this: sbe@burger:/opt/otrs$ grep -n X-OTRS-State Kernel/System/PostMaster/FollowUp.pm 57: if ($GetParam{'X-OTRS-State'}) { 58: $State = $GetParam{'X-OTRS-State'}; My simple patch in attachment. As I told already, it's a potential security flaw, maybe a user check based on email address as an agent authentication could be added. Stef -- #=- Stefan Berder tel : 6 14 80 -=# #=- Ingénieur système et réseau 01 53 95 14 80 -=# #=- TRANSPAC / CSIG-SIS-ISS mail : sbe@oleane.net -=# #=- /(bb|[^b]{2})/ stefan.berder@francetelecom.com -=#
participants (2)
-
Robert Kehl
-
Stefan Berder