[Koha-bugs] [Bug 28975] Holds queue lists can show holds from all libraries even with IndependentBranches

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28975

Shi Yao Wang <shi-yao.wang at inLibro.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #129810|0                           |1
        is obsolete|                            |

--- Comment #6 from Shi Yao Wang <shi-yao.wang at inLibro.com> ---
Created attachment 137133
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=137133&action=edit
Bug 28975: Holds queue lists can show holds from all libraries even with
IndependentBranches

When using IndependentBranches, usually all branches are removed from the
drop-down menus. But in the Holds Queue page, there is the possibility to
choose "All branches". From there, you can see holds from all libraries.

To recreate :
1) Activate IndependentBranches, IndependentBranchesPatronModifications and
IndependentBranchesTransfers
2) Create a staff user with limited permissions (NOT a superlibrarian),
including holds permissions. Here are mine as an example
  - circulate (all)
  - catalogue
  - borrowers
    - delete_borrowers
    - edit_borrowers
  - reserveforothers (all)
  - reports (all)
3) Create (or make sure you already have) a patron in another branch (we'll
call them patron X)
4) Place a hold for patron X on an available item from their own library
5) Run misc/cronjobs/holds/build_holds_queue.pl
6) Go to Circulation > Holds queue and make sure you can see the hold
7) Log in as your limited staff patron
8) Go to Circulation > Holds queue
9) In the drop-down menu, choose "All" and click Submit
-- Notice you see the hold of the patron from another branch under Patron
column: "A patron from library <library name>"
11) Apply the patch.
12) Notice that the "All" option is no longer available for the limited patron.
Limited patrons can't see holds from other libraries anymore.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.