https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37702 Phil Ringnalda <phil@chetcolibrary.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |m.de.rooy@rijksmuseum.nl, | |phil@chetcolibrary.org Severity|enhancement |normal Version|24.05 |Main Component|Circulation |Cataloging --- Comment #1 from Phil Ringnalda <phil@chetcolibrary.org> --- If someone with only fast_cataloging permission can't add an item to a regular record, then it doesn't seem like they should be able to add an item to a regular record even if they get there via creating a duplicate fastadd record. Doing so sounds like the sort of privilege escalation I would remember and abuse once I happened upon it :) Should Koha check for the only-fast_cataloging permission case before doing the duplicate check, and skip doing it if the user won't be able to do anything if there is a duplicate? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.