<?php
require_once __DIR__ . '/../includes/bootstrap.php';
$staff = require_staff_login();
header('Content-Type: application/json');
$n = trim($_GET['n'] ?? '');
$stmt = get_db()->prepare('SELECT id, subject, department_id FROM tickets WHERE ticket_number = ?');
$stmt->execute([$n]);
$t = $stmt->fetch();
if ($t && !staff_can_access_department($staff, (int) $t['department_id'])) $t = false; // Betreff fremder Abteilungen nicht preisgeben
echo json_encode($t ? ['id' => $t['id'], 'subject' => $t['subject']] : ['id' => null]);