[Koha-bugs] [Bug 34306] Update spine label tool to use more appropriate permissions

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34306

--- Comment #5 from Christopher Brannon <cbrannon at cdalibrary.org> ---
I disagree with the direction this is going.  I do not necessarily want people
that need to use the spine label tools to have access to other cataloging
tools.  If you change the permission altogether, you are changing how people
use these tools.  I would rather the permission label_creator permission
remained the permission to this tool.  If it is to remain on the cataloging
menu, which makes sense, it should:
1) make the cataloging link to the page, and the cataloging page available
2) only control whether the label tools are available on the cataloging page
3) not give access to other cataloging tools
4) should not allow access to the tools like it does by going straight to their
urls.

David, you stated "There isn't anonymous access to
/cgi-bin/koha/labels/spinelabel-home.pl. That page does require permission to
access it."

I cannot confirm your statement.  I've tested this against a patron that does
not have the label_creator permission, and she was able to access both tools. 
Another library also confirmed this.  Please tell me where we are missing this.
 Is there another permission that might be allowing access to these tools
somehow?

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.