http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13584 Bug ID: 13584 Summary: Able to view menu for Purchase Suggestions even when user does not have permission Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs@lists.koha-community.org Reporter: tomsStudy@gmail.com QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com, kyle.m.hall@gmail.com Same problem as Bug 10943. The page requires borrowers to access but the menu item is still shown to users who do not have the borrowers permission.
From purchase-suggestions.pl we can see there is no check for which permissions are required to visit the linked page.
Yet in the include the only thing checked is: [% IF ( suggestionsview ) %] So a user who doesn't have permission to access Purchase suggestions can still see the menu item. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.