Question

How can we prevent public access to the {ticketurl} or {ticket} without restricting the correspondent's access?

Some of our correspondents are passing sensitive information to us through FogBugz cases. They are submitting links to other cases in our support forums, exposing all of their cases to the public. They are clearly not aware that they might expose their sensitive information this way.

We're trying to educate our users to keep their {ticketurl} private, but we'd like to enforce this somehow.

I see several ways this can be solved:

1. Removing the correspondent's case listing at the bottom of the public {ticketurl}-page, but that would the correspondents' sense of their history.
2. Coding a gate keeping page, where the correspondent have to paste his {ticket}, but that still does not prevent them from posting the {ticket} publicly and still require some education of our correspondents.
3. Same as 2. just with a more aggressive authentication system that require a correspondent to log in.

Is there a way to manage this situation with an existing FogBugz feature or a plugin?

Answer 1

If the url has 8 random characters the end it will show all the other corresponding tickets. If you chop off 4 of those characters, the url will now only show you that particular case (and no other cases).