[Koha-bugs] [Bug 29509] GET /patrons* routes permissions excessive

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29509 --- Comment #3 from Tomás Cohen Arazi <tomascohen@gmail.com> --- (In reply to Martin Renvoize from comment #2)

I wondering how our changes to objects.search and objects.find might affect public routes and seeing ones owned data?

That's a good question. It probably highlights the search_limited methods are too staff side oriented. I did this: $ git grep 'sub search_limited' Koha/ArticleRequests.pm:sub search_limited { Koha/Patron/Discharge.pm:sub search_limited { Koha/Patrons.pm:sub search_limited { Koha/Reviews.pm:sub search_limited { It feels like safe for now. -- You are receiving this mail because: You are watching all bug changes.