[Koha-bugs] [Bug 28882] Incorrect permissions check client-side

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28882 --- Comment #3 from Marcel de Rooy <m.de.rooy@rijksmuseum.nl> --- Work to be done: Login with a non-superlibrarian user Edit permissions for a superlibrarian user => You can remove it, then cannot add it back Should we allow removal of superlibrarian permission by non-superlibrarian user? No, I definitely think that a non-superlib should not be able to remove perms from a superlib. That would be kind of a security hole imo. -- You are receiving this mail because: You are watching all bug changes.