# -- # Copyright (C) 2001-2019 OTRS AG, https://otrs.com/ # -- # This software comes with ABSOLUTELY NO WARRANTY. For details, see # the enclosed file COPYING for license information (GPL). If you # did not receive this file, see https://www.gnu.org/licenses/gpl-3.0.txt. # -- package Kernel::System::Ticket::Permission::InvolvedCheck; use strict; use warnings; our @ObjectDependencies = ( 'Kernel::Config', 'Kernel::System::CheckItem', 'Kernel::System::Log', 'Kernel::System::Ticket', ); sub new { my ( $Type, %Param ) = @_; # allocate new hash for object my $Self = {}; bless( $Self, $Type ); return $Self; } sub Run { my ( $Self, %Param ) = @_; # check needed stuff for (qw(TicketID UserID Type)) { if ( !$Param{$_} ) { $Kernel::OM->Get('Kernel::System::Log')->Log( Priority => 'error', Message => "Need $_!", ); return; } } # get ticket object my $TicketObject = $Kernel::OM->Get('Kernel::System::Ticket'); # get ticket data without dynamic fields my %Ticket = $TicketObject->TicketGet( TicketID => $Param{TicketID}, DynamicFields => 0, ); return if !%Ticket; # get queue config my $Queues = $Kernel::OM->Get('Kernel::Config')->Get('Ticket::Permission::InvolvedCheck::Queues'); # check queues if ( $Queues && ref $Queues eq 'HASH' && %{$Queues} && $Ticket{Queue} ) { return if !$Queues->{ $Ticket{Queue} }; # get check item object my $CheckItemObject = $Kernel::OM->Get('Kernel::System::CheckItem'); # extract permission list my @PermissionList = split ',', $Queues->{ $Ticket{Queue} }; my %PermissionList; STRING: for my $String (@PermissionList) { next STRING if !$String; # trim the string $CheckItemObject->StringClean( StringRef => \$String, ); next STRING if !$String; $PermissionList{$String} = 1; } # if a permission like 'note' is given, the 'ro' permission is required to calculate the right permission $PermissionList{ro} = 1; return if !$PermissionList{rw} && !$PermissionList{ $Param{Type} }; } # get the history of the ticket my @TicketHistory = $TicketObject->HistoryGet( TicketID => $Param{TicketID}, UserID => 1, ); ROW: for my $Row (@TicketHistory) { next ROW if !$Row; next ROW if ref $Row ne 'HASH'; next ROW if !$Row->{CreateBy}; return 1 if $Row->{CreateBy} eq $Param{UserID}; } # return no access return; } 1;