Hello,

Going deeper into the use of the Projeqtor API, we've hit an issue related to access rights.
Maybe related to this topic ?  https://www.projeqtor.org/fr/forum-fr/2-submit-issues/12222-9-3-4-9-5-0-api-issue-on-planningelements-access-rights  

With the following query :

{{baseURL}}/api/History/search/refType='Ticket'/refId={{ticketID}}/colName='idStatus'

- The solution works great for a user with administrative account
- When trying the same request with a Project Leader account, result is :
  - empty result if the {{ticketID}} belongs to a project the user has access to
  - valid result if the {{ticketID}} belongs to a project the user does not have access to

=> So in fact the PL can get data from tickets that he does not have access to.