https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10190 --- Comment #408 from Martin Renvoize (ashimema) <martin.renvoize@openfifth.co.uk> --- Created attachment 195429 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195429&action=edit Bug 10190: Enforce manage_circ_rules_from_any_libraries permission - Add OR-type x-koha-authorization to /circulation_rules, /circulation_rules/kinds, and /circulation_rules/config endpoints so users with either circulate:circulate_remaining_permissions OR parameters:manage_circ_rules can access them - Enforce manage_circ_rules_from_any_libraries in the set_rules controller: users without this permission may only set rules for their own library and cannot set default (*) rules - Add explicit use C4::Auth qw(haspermission) import to CirculationRules.pm - Lock the library selector in the Vue UI for users who lack manage_circ_rules_from_any_libraries, defaulting them to their own library - Update set_rules() tests to cover the new permission restrictions -- You are receiving this mail because: You are watching all bug changes.