The user can not see the replies

This bug still exists in beta3. It is really strange that the client cannot see the replies to his/her ticket because the 'View other users tickets' is not set.

Please fix it. Thanks!

Works for me, thank You.

Also having this issue. Unfortunately, still novice enough to not know how to apply patches, so I will be changing the permissions for now.

The user will only have the opportunity to see their tickets and answers, if the note - is around controlling access to content. But this might not be the solution, since it then the user eg then in the Advanced forum can do it all. The patch has not helped. Sorry for my english.

Drupal 7.12

My problem is resolved. It was at the Forum Access module. With version 7.x-1.0-rc1 is now anything goes.

Sorry - here are the patch:

support.module

all NODE_ACCESS_IGNORE replace with NODE_ACCESS_ALLOW (line 188)

          if (user_access('view other users tickets') || user_access('administer support') || user_access('edit any ticket') || user_access('delete any ticket')) {
            $access = NODE_ACCESS_ALLOW;
          }
          else {
            // User created this ticket, allow access.
            if ($account->uid == $node->uid && $account->uid != 0) {
              $access = NODE_ACCESS_ALLOW;
            }
            // User is subscribed to this ticket, allow access.
            else if (db_query('SELECT 1 FROM {support_assigned} WHERE nid = :nid AND uid = :uid', array(':nid' => $node->nid, ':uid' => $account->uid))->fetchField()) {
              $access = NODE_ACCESS_ALLOW;
            }

Manually applied patch #7 above and tested. Works awesome! Please commit this

Thanks

I'm running in to the same issue and patch #7 isn't resolving it for me.

Unfortunatly the patch is not working for me either. I was running ACL, Content Access, Forum Access but all those have been removed recently and I still have this issue, even on rc1.

Has this anything to do with me using uid1?

As described in the OP, if I give "View other users tickets" to the role allowed to view tickets, it works, but then they can see all tickets, not good, those ticket can contain sensitive data like usernames and passwords.

This really is a critical bug in the module, its really driving my clients insane and many many complaints about this. Some feedback from the developer would be very much appreciated, this issue was posted some time ago and clearly is still an issue, and a bad one.

I have a patch that seems to be working for me. I think that it was comparing the comment uid with the uid of the current user, this worked for nodes but prevented the user from seeing anyone elses comments.

To apply manually:

Line 2354 support.module
Replace:

            global $user;
            $ticket_alias = $query->leftJoin('support_ticket', 'st', 'st.nid = ' . $nalias . '.nid');
              $query->condition(db_or()
                ->condition(db_and()
                // Must be on the allowed clients list
                ->condition($ticket_alias . '.client', $clients)
                // and must be owned by the user
                ->condition($nalias . '.uid', $user->uid))
                // or must be something other than a support ticket
               ->condition($ticket_alias . '.client', null));

With:

            global $user;
            $ticket_alias = $query->leftJoin('support_ticket', 'st', 'st.nid = ' . $nalias . '.nid');
            if ($table == 'node') {
              $query->condition(db_or()
                ->condition(db_and()
                // Must be on the allowed clients list
                ->condition($ticket_alias . '.client', $clients)
                // and must be owned by the user
                ->condition($nalias . '.uid', $user->uid))
                // or must be something other than a support ticket
                ->condition($ticket_alias . '.client', null));
            }
            else if ($table == 'comment') {
              $query->leftJoin('node', 'par', 'par.nid = '. $nalias . '.nid');
              $query->condition(db_or()
                ->condition(db_and()
                // Must be on the allowed clients list
                ->condition($ticket_alias . '.client', $clients)
                // and must be owned by the user
                ->condition('par.uid', $user->uid))
                // or must be something other than a support ticket
                ->condition($ticket_alias . '.client', null));
            }

sgerbino - success!

Will leave this as needs review for now until I have tested this more, but for now its working, I cannot thank you enough!

i have same problem.
client'ss can't see user's reply's.
how can i solve this?
latest patch(obove comment) don't work.

i solve this issue for my self
but that's may cause other problems that i don't mentioned
i changed

global $user;
            $ticket_alias = $query->leftJoin('support_ticket', 'st', 'st.nid = ' . $nalias . '.nid');
            $query->condition(db_or()
              ->condition(db_and()
                // Must be on the allowed clients list
                ->condition($ticket_alias . '.client', $clients)
                // and must be owned by the user
                ->condition($nalias . '.uid', $user->uid))
              // or must be something other than a support ticket
              ->condition($ticket_alias . '.client', null));

to this:

 global $user;
            $ticket_alias = $query->leftJoin('support_ticket', 'st', 'st.nid = ' . $nalias . '.nid');
            $query->condition(db_or()
              ->condition(db_and()
                // Must be on the allowed clients list
                ->condition($ticket_alias . '.client', $clients)
                // and must be owned by the user
                )
              // or must be something other than a support ticket
              ->condition($ticket_alias . '.client', null));

i don't know why "and must be owned by the user" should be there?

Hrmm when I wrote the patch I put it there so people could not see comments to other tickets unless they have "View other tickets" permission or "Administer support tickets" permission.

You should only see comments when it is on the node you have created basically.

Works for me, thanks!

metin2 private servers

#11 works fine. thanks

#11 worked for me too, w00t.

Thanks -- sorry to have waited so long to review this bug. Confirmed the bug, and fix -- committed the patch from #11, slightly modified.
http://drupalcode.org/project/support.git/commit/99d624d