Issues - tinker_tickets - Lotus Git Server

LotusGuild/tinker_tickets

Labels Milestones New Issue

In-app notification title formatter assumes every ticket update is a status change — breaks for title/priority/description/category/type/visibility edits notifications priority/high

opened 2026-09-01 00:08:16 -04:00 by jared

Failed Matrix webhook posts are logged but never retried — confirm this best-effort design is intentional needs-decision notifications priority/low

opened 2026-09-01 00:07:13 -04:00 by jared

Matrix webhook calls are synchronous with no connect-timeout — worst case ~30s added to a single comment's response time notifications performance priority/medium

opened 2026-09-01 00:07:12 -04:00 by jared

Bulk-operation audit_log entries use a different shape than every other status-change path, breaking the timeline and in-app notifications data-integrity notifications priority/medium

opened 2026-09-01 00:07:11 -04:00 by jared

Watchers are never pruned when a ticket's visibility is tightened notifications priority/medium security

opened 2026-09-01 00:07:10 -04:00 by jared

sendAssignmentNotification() has the same missing-visibility-check gap as #46 notifications priority/medium security

opened 2026-09-01 00:07:10 -04:00 by jared

notifyWatchers() only half-redacts for non-public tickets — title and shared notify-list still leak notifications priority/medium security

opened 2026-09-01 00:07:09 -04:00 by jared

@mention notifications leak confidential/internal ticket content to users with no access — worse than #46 notifications priority/high security

opened 2026-09-01 00:07:08 -04:00 by jared

Bulk operations never fire Matrix/watcher notifications for status changes notifications priority/high

opened 2026-09-01 00:07:07 -04:00 by jared

api/notifications.php: in-app notifications don't re-check current ticket visibility notifications priority/medium security

opened 2026-08-31 21:36:17 -04:00 by jared

Confidential/internal ticket titles leak to Matrix on create/status-change (NotificationHelper missing visibility check) notifications priority/high security

opened 2026-08-31 21:36:16 -04:00 by jared

create_ticket_api.php: dedup/escalation race can duplicate notifications or drop a real escalation concurrency notifications priority/medium

opened 2026-08-31 21:29:43 -04:00 by jared