https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15520 --- Comment #13 from Katrin Fischer <katrin.fischer@bsz-bw.de> ---

I (In reply to Katrin Fischer from comment #11)

...

But couldn't they change the home library in their records too? I think in general we got a problem there, that you can get around the limits, maybe the logged-in library is more helpful?

I think this should be the user's logged in library - for extra protection I think the library would implement AutoLocation and limit logged in site by ip so this would require some extra steps but would also be a first level guard against accidentally altering other rules

A lot of the public and smaller libraries here don't have static IP addresses, so AutoLocation is not good. But it's a problem we should solve on this bug report! I think the new permission adds an extra barrier as a good first step and it will prevent people from accidentally editing the wrong library's rules. -- You are receiving this mail because: You are watching all bug changes.