[Koha-bugs] [Bug 34306] Able to access tools without permission

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34306

--- Comment #1 from Katrin Fischer <katrin.fischer at bsz-bw.de> ---
There are 2 levels of checks: 
* In the templates, to be able to hide links and such 
* In the .pl files for allowing or not to access the page

This should not be a general problem.

The permissions for the label home page are set quite low, this can be
discussed. Currently it's catalogue:

https://git.koha-community.org/Koha-community/Koha/src/branch/master/labels/label-home.pl#L34

I am not sure why that is, but it could be changed to labels I think. Also for
the other pages.

Other tools have the expected stricter permissions, like notices and slips:

https://git.koha-community.org/Koha-community/Koha/src/branch/master/tools/letter.pl#L84

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.