http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8706 Priority: P5 - low Change sponsored?: --- Bug ID: 8706 CC: m.de.rooy@rijksmuseum.nl Assignee: gmcharlt@gmail.com Summary: Private lists can be accessed by anyone Severity: critical Classification: Unclassified OS: All Reporter: oleonard@myacpl.org Hardware: All Status: NEW Version: master Component: Virtual Shelves Product: Koha Any private list can be accessed by any user by typing the shelf number in the URL: /cgi-bin/koha/opac-shelves.pl?viewshelf=XXX -- You are receiving this mail because: You are watching all bug changes.