https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28957 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook@prosentient.com.au --- Comment #4 from David Cook <dcook@prosentient.com.au> --- So I was just about to report this as a security vulnerability... My perspective is if you have top-level "plugins" permissions, you can run any method in a plugin, and that's bad. -- You are receiving this mail because: You are watching all bug changes.