Starting from WalterEgo's work (https://github.com/WalterEgo/osTicket-1.7-MultipleEmailRecipients(https://github.com/WalterEgo/osTicket-1.7-MultipleEmailRecipients)), I am writing a MOD implementing full support for CC emails AND simple password authentication for clients, therefore solving some main security issues (see here https://github.com/osTicket/osTicket-1.7/issues/506#issuecomment-14901859(https://github.com/osTicket/osTicket-1.7/issues/506#issuecomment-14901859))
As for CC emails, it works more or less as described in this post http://www.osticket.com/forums/forum/osticket-1-7-latest-release/suggestions-and-feedback-aa/9538-send-email-cc-to-alternative-email-adresses?p=44014#post44014(http://www.osticket.com/forums/forum/osticket-1-7-latest-release/suggestions-and-feedback-aa/9538-send-email-cc-to-alternative-email-adresses?p=44014#post44014) (cc opt out feature is still missing, I still have to work on that; and also client password reset should be implemented)
As for password auth for clients, instead of modifying the whole auth system based on email and ticket ID (otherwise it would become more of a fork rather than a simple MOD), I implemented a little workaround so that client login page asks for a password (required) and a ticket ID (optional), and if no (valid) ticket ID is provided (but the password is correct), the program picks up the first ticket id available for that client and then logs him/her in, redirecting him/her to ticket list page. Client passwords are automatically created by the program and sent via email to clients, and can be changed by clients after loggin in (there is also a "remember me" flag so clients do not need to insert email and password every time).
It is not exactly the best auth system ever :) but I just needed a quick and dirty MOD to implement CC emails with a minimum of security.
If you see strange comments in the code (like /*__(*/ ), do not worry: they are aimed at making this MOD easily portable to the Multilanguage MOD
Up to now I made some tests by my own and fixed some bugs, but I need people helping me testing it more deeply, you can find it here if you are interested:
https://github.com/alpianon/osTicket-1.7-ClientAuth-CCemails(https://github.com/alpianon/osTicket-1.7-ClientAuth-CCemails)
Cheers,
Alberto