https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41127 Bug ID: 41127 Summary: Unneeded Permission required when adding child record. Initiative type: --- Sponsorship --- status: Product: Koha Version: 25.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs@lists.koha-community.org Reporter: esther.melander@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org CC: m.de.rooy@rijksmuseum.nl To replicate: 1. Set EasyAnalyticalRecords to don't show and UseControlNumber to Use. Enable ShowComponentRecords to show in both staff and OPAC. 2. Create a patron with permissions to login into the staff interface. Grant all cataloging permissions except edit_items and edit_items_restricted. 3. Before logging as the example patron, prepare a bibliographic record. Add a child record with an attached item. The title of the child record should be: 245##$aTitle$p1967-1968 4. Login as the example patron. Find the prepared bibliographic child record and click Edit > Edit as new (duplicate). 5. Edit the record so the duplicate child record has a title like: 245##$aTitle$p1968-1969 6. Save. Note the user will be prompted to confirm saving because the system detects the new child record as a duplicate. Confirm the save. The user is logged out. 7. Relogin as the example patron and find the parent record. Click on Components and see there are now two child records. Koha did save the record, but inappropriately logged out the user. I would not expect the cataloger to need the edit_items permission because the user is not editing an item, but duplicating a bibliographic record. 8. Repeat the steps but grant the example patron the edit_items permission. See that the user is able to add a new child record and is not logged out. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.