New ticket page shown without TICKET_CREATE
|Reported by:||anonymous||Owned by:||Christopher Lenz|
In a test setup, all permissions (including TICKET_CREATE) were removed for the anonymous user. However, the new ticket page was shown for the anonymous user. Only after entering the ticket data and submitting the ticket was the `permission denied' message shown.
This is confusing, as it gives the impression that it's possible to create a new ticket, and fails at the last moment. It would be better not to show the new ticket page at all for users without the TICKET_CREATE permission.