# Unathorized access to tickets at random

**URL:** https://community.zammad.org/t/unathorized-access-to-tickets-at-random/5590
**Category:** Technical assistance
**Created:** [November 3, 2020, 10:36am UTC](https://community.zammad.org/t/unathorized-access-to-tickets-at-random/5590 "2020-11-03T10:36:53Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![rsysadmin](https://community.zammad.org/user_avatar/community.zammad.org/rsysadmin/32/3306_2.png) [@rsysadmin](https://community.zammad.org/u/rsysadmin)
#### Post date: [November 3, 2020, 10:36am UTC](https://community.zammad.org/t/unathorized-access-to-tickets-at-random/5590/1 "2020-11-03T10:36:54Z")

</div>

- Used Zammad version: 3.4.x
- Used Zammad installation source: (source, package, …) Source
- Operating system: CentOS 8
- Browser + version: Firefox, Chrome, M$ Edge, all latest versions

### Expected behavior:

- Access to all tickets as Agent and Admin

### Actual behavior:

- Some tickets created by the Admin/Agent randomly show as “Unauthorized” on the list for all Agents/Admins:  
 ![image](https://community.zammad.org/uploads/default/original/2X/2/287c5ee9ee8cceea2ac816f19160b6f912bdd488.png)

Other tickets are fine.

Accessing the unauthorized ones shows:  
 ![image](https://community.zammad.org/uploads/default/original/2X/d/d6205ff9cd29353a1edfb36cbe86eccdb2077960.png)

### Steps to reproduce the behavior:

- Login as Agent/Admin, create a ticket, wait for a day or two and reload the web interface

I found some posts on the same subject, like this one marked as “[SOLVED]”:

> [@Help: \[solved \]Opps.. I'm sorry, but you have insufficient rights to open this Ticket. note with all tickets](https://community.zammad.org/t/help-solved-opps-im-sorry-but-you-have-insufficient-rights-to-open-this-ticket-note-with-all-tickets/2429):
>
> Infos: Used Zammad version: 2.9 Used Zammad installation source: (source, package, …) Operating system: Linux Browser + version: Chrome latest, Safari latest Expected behavior: be able to open and change tickets Actual behavior: " Opps… I’m sorry, but you have insufficient rights to open this Ticket." note with all tickets, even the ones I am owner off What did I do? I am the admin of our Zammad instance which has just been installed and put into operation. Great job building Zammad btw!…

Unfortunately, the proposed solution:

> “I was able to find the problem and fix it.  
> The checkbox “agent - access to CTI” was not set at the role “Admin”.”

does not work in our case.

Neither does the suggested commands:

> In the URL you’ll find an ID, do `zammad run rails r 'p Ticket.find({ID})'` and check in which group it lifes ( `zammad run rails r ' p Group.find(GROUP-ID)'`. Check if you have rights to that group.

In my case, I get this:

 ![image](https://community.zammad.org/uploads/default/original/2X/0/0cc39311c924a3a11345108b47f4942805dd8cff.png)

So I cannot run the second command…

Any ideas on how to solve this random behavior?

Thanks a lot in advance!

Best,  
Martin

---

<div class="post-metadata">

### Author: ![MrGeneration](https://community.zammad.org/user_avatar/community.zammad.org/mrgeneration/32/9260_2.png) [@MrGeneration](https://community.zammad.org/u/MrGeneration)
#### Post date: [November 17, 2020, 7:07pm UTC](https://community.zammad.org/t/unathorized-access-to-tickets-at-random/5590/2 "2020-11-17T19:07:12Z")

</div>

> [@rsysadmin](#):
>
> In my case, I get this:
> 
> ![image](https://community.zammad.org/uploads/default/original/2X/0/0cc39311c924a3a11345108b47f4942805dd8cff.png)
> 
> So I cannot run the second command…

Remove `{}` which is part of the ID placeholder.  
This command then should work.

Usually access denied errors are due to missing permissions to access the group the ticket lifes in.

---

<div class="post-metadata">

### Author: ![system](https://community.zammad.org/uploads/default/original/1X/5c5afaea2d23f811dbec33cd4edb02fa29d3262f.png) [@system](https://community.zammad.org/u/system)
#### Post date: [March 17, 2021, 7:07pm UTC](https://community.zammad.org/t/unathorized-access-to-tickets-at-random/5590/3 "2021-03-17T19:07:14Z")

</div>

This topic was automatically closed 120 days after the last reply. New replies are no longer allowed.
