[Koha-bugs] [Bug 29509] GET /patrons* routes permissions excessive

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29509

--- Comment #6 from David Cook <dcook at prosentient.com.au> ---
(In reply to Tomás Cohen Arazi from comment #4)
> We need a new 'list_borrowers' subpermission.

That's my conclusion with bug 30230 as well. I was thinking "view_borrowers"
but "list_borrowers" might be better. We'd need to add it to "member.pl" as
well as that provides a page which calls the /patrons* routes to populate the
data table.

I think bug 29523 will become more and more relevant there as well...

-- 
You are receiving this mail because:
You are watching all bug changes.