https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26183 Bug ID: 26183 Summary: UpdateItemWhenLostFromHoldList should be limited in scope Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Staff Client Assignee: koha-bugs@lists.koha-community.org Reporter: andrew@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com UpdateItemWhenLostFromHoldList lets one update any value in the items table when cancelling a hold from the Holds to Pull list. That includes things that aren't normally editable. For instance, one can use it to change itemnumbers. It doesn't seem likely anyone will set it up to do so, but the potential damage is pretty severe. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.