Use the same URL for viewing tickets when authenticated or not---the couchdb ID will be the random string for the secret URL.

Tickets created when user was unauthenticated will be viewable by anybody who knows the URL.

1 files changed, 1 insertions, 1 deletions

diff --git a/users/app/controllers/controller_extension/authentication.rb b/users/app/controllers/controller_extension/authentication.rb
index ebd80b0..598d8a9 100644
--- a/users/app/controllers/controller_extension/authentication.rb
+++ b/users/app/controllers/controller_extension/authentication.rb
@@ -21,7 +21,7 @@ module ControllerExtension::Authentication
 
   def access_denied
     redirect_to login_url, :alert => "Not authorized" if !logged_in?
-    redirect_to root_url, :alert => "Not authorized"
+    redirect_to root_url, :alert => "Not authorized" if logged_in?
   end
 
   def admin?