id summary reporter owner description type status priority milestone component version resolution keywords cc 269 Any user can subscribe by self on any ticket in any tracs via email2trac slevin@… bas "If user know the project name, he is can change it in replay message to trac or he is can create a new e-mail to trac with and known Project_Name and after one space #Ticket_id in subject filed and send it. So trac subcribe that user after receive that message on ticket=#ID and Project =Project_Name from subject in the received e-mail without any checks of email authors permissions. I guess enought to checking author of email (or senders e-mail address) with fileds author,CC (or any subcribers list) in exist ticket (equal ticket_id from subject in e-mail) and when users_name can't find in tickets subscribers of ticket - drop e-mail (or any other action) Bas, can U make control of this check like variable in email2trac.conf ? - for example: check_subscribers_list = 0/1 " setup closed minor email2trac 2.4.0 invalid permissions subscribe