http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7648 Priority: P5 - low Change sponsored?: --- Bug ID: 7648 CC: gmcharlt@gmail.com Assignee: kyle.m.hall@gmail.com Summary: staff can make themselves superlibrarians QA Contact: koha.sekjal@gmail.com Severity: normal Classification: Unclassified OS: All Reporter: nengard@gmail.com Hardware: All Status: NEW Version: master Component: Patrons Product: Koha This seems like an oversight to me, but if you give a staff patron the ability to set permissions for other staff members they can then update their own permissions and make themselves superlibrarians. I would say that only superlibrarians can make other staff superlibrarians, and I'd go even further to say that only superlibrarians should be able to change their own permissions - but I think this is probably due for some discussion either way because it's a pretty big oversight. -- You are receiving this mail because: You are watching all bug changes.