Skip to main content

Bug - View agent without permission


Forum|alt.badge.img+2
  • Contributor
  • 3 replies

Hi

 

I found a bug in the inventory module. It seems that even if an agent does not have permission to manage agents they can still go to an agent profile from the inventory view.  This does not look like intended behavior. See below:

 

Give an agent inventory permission

 

 

 

Make sure that the agent does not have the manage agents admin permission

 

 

Go to inventory and filter by another agent that has an associated asset (used by)

 

 

The returned assets have URLs pointing towards the agent in the Used By column

 

 

 

Hovering the name (should give a preview i think) breaks the page, renders the menu on top of list

 

 

Clicking on the name takes you to the profile of that agent

 

Did this topic help you find an answer to your question?

2 replies

Trevor Cooper
Top Contributor
Forum|alt.badge.img+3
  • Top Contributor
  • 12 replies
  • February 17, 2025

How is that any different from an agent filtering the ticket view for where another agent is the requester, then clicking on the agents name?


Forum|alt.badge.img+2
  • Author
  • Contributor
  • 3 replies
  • February 20, 2025
Trevor Cooper wrote:

How is that any different from an agent filtering the ticket view for where another agent is the requester, then clicking on the agents name?

I believe the results are the same in these cases yes


Reply