https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28957 --- Comment #6 from David Cook <dcook@prosentient.com.au> --- (In reply to Martin Renvoize (ashimema) from comment #0)
Some plugins with hooks into the UI outside of the tools and plugin management page require the overall 'plugins' permission to run.
This however has the side effect of allowing users with those permissions to also manage plugins which may not be the effect wanted.
Example: A site has both an Online Payments plugin and the CLA Permissions Check plugin installed. To use the button from the catalogueing toolbar for the CLA plugin you are required to have the overall plugins permission. This then exposes the login credentials for the Online payments plugin as the user gets access to the tools pages.
Ah right so "configure" needs to be separate from "run" for sure. But I think "report", "tool", and "admin" might all be synonymous with "run"? Although I'm guessing that people have used them to limit people to plugins in particular areas of Koha... Tricky. -- You are receiving this mail because: You are watching all bug changes.