https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24849 Bug ID: 24849 Summary: Permissions checks are missing in borracount controller Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Fines and fees Assignee: koha-bugs@lists.koha-community.org Reporter: martin.renvoize@ptfs-europe.com QA Contact: testopia@bugs.koha-community.org Three actions are available withing the borraccount controller.. they all have sub-permissions checks to restrict the visibility of the buttons leading to those actions, but the controller itself lacks such checks and as such the permissions can be subverted. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.