[Koha-bugs] [Bug 38414] Reports permissions not properly enforced

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38414 --- Comment #46 from David Cook <dcook@prosentient.com.au> --- (In reply to Emmi Takkinen from comment #45)

This isn't working as intented in version 25.05.11. Most of the Javascript code from first patch is missing and buttons are still shown when patron doesn't have create_reports or delete_reports permissions. Link to commit in GitHub https://github.com/Koha-Community/Koha/commit/ b02e6c780b83b8c7f7cb89087920a8bd7a09c016.

That is interesting. I'd say the controller change is the key one though. Are you able to perform unauthorized actions? Or is it just the buttons presentation isn't as expected? -- You are receiving this mail because: You are watching all bug changes.