[Koha-bugs] [Bug 6676] Acquisition basket access control trivially by-passable
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Mon Aug 8 23:46:50 CEST 2011
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6676
--- Comment #1 from Mason James <mtj at kohaaloha.com> 2011-08-08 21:46:50 UTC ---
Created attachment 4900
--> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=4900
.
there are 3 user-permission settings to control access to acq-baskets
• group_manage Manage orders & basketgroups
• order_manage Manage orders & basket
• order_receive Manage orders & basket
have you tested accessing a basket, with all 3 settings 'off'?
--
Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA Contact for the bug.
More information about the Koha-bugs
mailing list