Issues - tinker_tickets - Lotus Git Server

LotusGuild/tinker_tickets

Labels Milestones New Issue

SLA priority-alert banner doesn't update when priority changes without a page reload priority/medium ux

by jared was closed 2026-09-08 21:18:23 -04:00

.env.example is missing 5 environment variables that config.php reads and README documents documentation priority/medium

by jared was closed 2026-09-08 20:46:39 -04:00

Workflow Designer allows duplicate transition rows that silently override each other non-deterministically data-integrity priority/medium workflow

by jared was closed 2026-09-11 14:49:56 -04:00

Advanced Search silently drops filters it doesn't represent, on submit priority/medium ux

by jared was closed 2026-09-11 14:49:55 -04:00

Notification bell uses raw fetch() instead of lt.api, breaking CSRF token resync priority/medium ux

by jared was closed 2026-09-11 13:48:32 -04:00

Ticket dependency duplicate-check misses the semantic inverse relationship data-integrity priority/medium

by jared was closed 2026-09-08 20:46:36 -04:00

Custom field values have no server-side validation against field_type or select options priority/medium security

by jared was closed 2026-09-11 13:48:31 -04:00

User Activity report: "Tickets Assigned" column filters by ticket creation date, not assignment date priority/medium reliability

by jared was closed 2026-09-11 22:20:13 -04:00

api/notifications.php: in-app notifications don't re-check current ticket visibility notifications priority/medium security

by jared was closed 2026-09-11 13:48:31 -04:00

Collation inconsistency: saved_filters and ticket_attachments use utf8mb4_unicode_ci instead of the documented utf8mb4_general_ci convention data-integrity priority/medium

by jared was closed 2026-09-08 20:46:36 -04:00

Inconsistent FK ON DELETE behavior: bulk_operations.performed_by and ticket_templates.created_by default to RESTRICT data-integrity priority/medium

by jared was closed 2026-09-08 20:46:35 -04:00

13 of 33 API endpoints never disable display_errors — potential stack-trace leak priority/medium security

by jared was closed 2026-09-11 12:23:59 -04:00

ErrorHandler.php documented as global but only wired into 1 of 33 API endpoints priority/medium reliability

by jared was closed 2026-09-11 12:23:59 -04:00

Required-comment status-change flow isn't transactional (client and server) priority/medium reliability workflow

by jared was closed 2026-09-11 21:50:57 -04:00

Bulk-action buttons have no double-submit guard concurrency priority/medium ux

by jared was closed 2026-09-11 21:58:59 -04:00

create_ticket_api.php: dedup/escalation race can duplicate notifications or drop a real escalation concurrency notifications priority/medium

by jared was closed 2026-09-11 21:50:57 -04:00

Bulk operations: TOCTOU race on ticket status used for workflow validation concurrency priority/medium workflow

by jared was closed 2026-09-11 21:50:57 -04:00

Bulk operations aren't actually atomic despite the docblock claiming so priority/medium reliability

by jared was closed 2026-09-11 21:58:59 -04:00

1 2