- Used Zammad version: 5.0.3
- Used Zammad installation type: package
- Operating system: ubuntu
- Browser + version: firefox 96
I have configured with Core Workflow, some ticket fields as hidden or disabled if you are not owner of a ticket. So that you can’t record tickets or change fields without authorization.
now if one selects tickets with checkbox on overview, emerge below deactivated and hidden fields, such as owner, groups, etc. and thus one can bypass my rules through collection action.