https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42769 --- Comment #20 from Kyle M Hall (khall) <kyle@bywatersolutions.com> --- Created attachment 207991 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=207991&action=edit Bug 42769: (QA follow-up) SIP message tester should respect patron and item library restrictions This patch: * Requires borrowers: list_borrowers in addition to sip2 for the test_message endpoint * Refuses a patron the logged in user can't see ( Koha::Patrons->search_limited ) with a 404, the same as GET /patrons/{patron_id} * Refuses an item from another library with a 403 when IndependentBranches is enabled, unless the user is a superlibrarian * Parses the request the same way the SIP handler does before checking it, so a hand edited raw request gets the same checks * Refuses a raw request for any message the tester doesn't support ( login, hold, fee paid, etc ) -- You are receiving this mail because: You are watching all bug changes.