[Koha-bugs] [Bug 9270] New: Web-based SCO requires superlibrarian privileges
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Wed Dec 12 13:58:07 CET 2012
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9270
Bug ID: 9270
Summary: Web-based SCO requires superlibrarian privileges
Classification: Unclassified
Change sponsored?: ---
Product: Koha
Version: master
Hardware: All
OS: All
Status: NEW
Severity: critical
Priority: P5 - low
Component: Self checkout
Assignee: koha-bugs at lists.koha-community.org
Reporter: jcamins at cpbibliography.com
It would seem that the self-check user must have superlibrarian privileges,
rather than the more safe-seeming circulation privileges. This is a bit of a
security issue, since the cookies used on the self-checkout machine could then
be modified for use with the staff client.
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
More information about the Koha-bugs
mailing list