https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36654 Julian Maurice <julian.maurice@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Failed QA CC| |julian.maurice@biblibre.com --- Comment #5 from Julian Maurice <julian.maurice@biblibre.com> --- I think this has security implications as anyone with "edit_notices" permission could fetch any object from the database. In the CHECKOUT notice the biblio object is available so the example given could be rewritten simply as: [% biblio.title %] Can you provide another example where GetObjectById would be required ? -- You are receiving this mail because: You are watching all bug changes.