[Bug 33965] New: Hide patron accounts that are for admin use only
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 Bug ID: 33965 Summary: Hide patron accounts that are for admin use only Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs@lists.koha-community.org Reporter: cbrannon@cdalibrary.org QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com, kyle.m.hall@gmail.com We should have a setting that only superlibrarians can set to hide patron accounts that regular staff should not need to alter. Test accounts, anonymous patron accounts, etc. Superlibrarians would be the only users that could alter accounts marked as such. You should not be able to mark superlibrarian accounts as hidden. Regular staff would be able to see names and card info throughout the system, but they would not be able to view the patron record. They should be shown a screen like "Admin use only." -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 Magnus Enger <magnus@libriotech.no> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |magnus@libriotech.no See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=26170 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 Sally <sally.healey@cheshiresharedservices.gov.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sally.healey@cheshireshared | |services.gov.uk -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook@prosentient.com.au --- Comment #1 from David Cook <dcook@prosentient.com.au> --- That's certainly an interesting idea. I could see this being part of bug 26170 but it could be a useful feature in its own right. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 Sally Lodico <Slodico@knoxlib.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Slodico@knoxlib.org -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 rpalermo@oslri.net changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rpalermo@oslri.net --- Comment #2 from rpalermo@oslri.net --- As a consortium with over 1,000 staff user accounts (most of which also have a valid patron account), this would be very useful. There is no reason that library staff needs to see the staff accounts for every user in our system. The only people who need to see that are superlibrarians. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 Hannah Dunne-Howrie <hdunne-howrie@westminster.gov.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hdunne-howrie@westminster.g | |ov.uk --- Comment #3 from Hannah Dunne-Howrie <hdunne-howrie@westminster.gov.uk> --- We would love to see this feature enabled. We have a problem in which staff members find their own account used for enabling their SSO and become confused and merge with their personal account which then causes the SSO to fail. As we have a large staffing pool of 250 library workers it's impossible to completely sort out with user instructions so we would like to see these staff accounts hidden from view and only visible to superlibrarian accounts. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 --- Comment #4 from David Cook <dcook@prosentient.com.au> --- Hmmm yeah I think what Christopher is describing is a different use case. Hiding staff users is different from system users (like test accounts, anonymous accounts, SIP users, API users, etc). Both ideas are interesting, although I imagine different libraries would have different ideas about who should be able to see staff users. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 --- Comment #5 from Christopher Brannon <cbrannon@cdalibrary.org> --- (In reply to David Cook from comment #4)
Hmmm yeah I think what Christopher is describing is a different use case. Hiding staff users is different from system users (like test accounts, anonymous accounts, SIP users, API users, etc).
Both ideas are interesting, although I imagine different libraries would have different ideas about who should be able to see staff users.
Correct. Some libraries (like our own) use a single account for staff access and personal access. And we don't allow staff to update their own accounts. So blocking staff accounts from other staff would not be helpful. Maybe in some cases, but not ours. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 --- Comment #6 from Hannah Dunne-Howrie <hdunne-howrie@westminster.gov.uk> --- I'd suggest that if there's a way we could have a tick box option in the patron category settings for 'only visible for superlibrarians' that would allow for customization across different Koha libraries. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 --- Comment #7 from Christopher Brannon <cbrannon@cdalibrary.org> --- That would work for me. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 --- Comment #8 from David Cook <dcook@prosentient.com.au> --- (In reply to Hannah Dunne-Howrie from comment #6)
I'd suggest that if there's a way we could have a tick box option in the patron category settings for 'only visible for superlibrarians' that would allow for customization across different Koha libraries.
That might be easier said than done. Looking back on the original description, it's not quite clear to me what Christopher is after here. Does the "Protected" setting cover that enough? -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 --- Comment #9 from Christopher Brannon <cbrannon@cdalibrary.org> --- (In reply to David Cook from comment #8)
(In reply to Hannah Dunne-Howrie from comment #6)
I'd suggest that if there's a way we could have a tick box option in the patron category settings for 'only visible for superlibrarians' that would allow for customization across different Koha libraries.
That might be easier said than done.
Looking back on the original description, it's not quite clear to me what Christopher is after here. Does the "Protected" setting cover that enough?
No. This goes beyond protecting the account. One can simply turn off the protection check mark and delete or alter the account. I want it so that regular staff can't see it or edit it. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33965 --- Comment #10 from David Cook <dcook@prosentient.com.au> --- (In reply to Christopher Brannon from comment #9)
(In reply to David Cook from comment #8)
(In reply to Hannah Dunne-Howrie from comment #6)
I'd suggest that if there's a way we could have a tick box option in the patron category settings for 'only visible for superlibrarians' that would allow for customization across different Koha libraries.
That might be easier said than done.
Looking back on the original description, it's not quite clear to me what Christopher is after here. Does the "Protected" setting cover that enough?
No. This goes beyond protecting the account. One can simply turn off the protection check mark and delete or alter the account. I want it so that regular staff can't see it or edit it.
So with bug 36085 non-superlibrarians shouldn't be able to turn off the protected status so they couldn't delete or alter the account. So I think that would leave just the visibility aspect? With the visibility aspect, I suppose there'd be two parts as well. Listing/search results and the detail page. The tricky bit with the listing/search results would be that any changes would impact existing API usage, so we'd want to be careful there. (That said, we really need to add filters like this for other use cases, so it's a good opportunity to think about how we apply filters/restrictions like this for the API and detail view.) -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org