https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38414 --- Comment #48 from Emmi Takkinen <emmi.takkinen@koha-suomi.fi> --- (In reply to David Cook from comment #46)
(In reply to Emmi Takkinen from comment #45)
This isn't working as intented in version 25.05.11. Most of the Javascript code from first patch is missing and buttons are still shown when patron doesn't have create_reports or delete_reports permissions. Link to commit in GitHub https://github.com/Koha-Community/Koha/commit/ b02e6c780b83b8c7f7cb89087920a8bd7a09c016.
That is interesting. I'd say the controller change is the key one though. Are you able to perform unauthorized actions?
Or is it just the buttons presentation isn't as expected?
All buttons are still displayed on pop-up. I was able to delete a report with just execute_reports permission. Edit, Duplicate and Schedule buttons lead to "Error: You do not have permission to access this page.". -- You are receiving this mail because: You are watching all bug changes.