https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41845 --- Comment #2 from Caroline Cyr La Rose <caroline.cyr-la-rose@inlibro.com> --- (In reply to David Cook from comment #1)
Going forward, I do think we need both "allow" and "deny" (or "restrict") permissions, but they need to be separated in a way the effective of the permission clear.
I think what bugs me most is that when I check the main "Cataloging" permission (editcatalogue), it also checks the restrictive permission (edit_items_restricted) which means that you think the person has all permissions in cataloging, but in fact they don't. I'm not sure how the revamp will affect the UI, but I think that if continue to have restrictive permissions, if you check the "main" permission of a group, it should NOT include the restrictive permissions (i.e. checking editcatalogue should check everything in that section EXCEPT edit_items_restricted) -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.