https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37685 Bug ID: 37685 Summary: Adding a new subpermission to a permission category grants new features to all staff with a top level permission Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs@lists.koha-community.org Reporter: nick@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com On bug 29393 there was a new subpermission added to the borrowers permission: "send_messages_to_borrowers" This meant that all staff who were previously able to add/update/delete patrons could now also send them messages with any content. We have received complaints from libraries who do not wish all staff to have had this new permission added. Messaging and borrower CRUD are not necessarily related. This points to a larger problem with our permissions, but I think in terms of updates/upgrades it is worth having the conversation of how we should go about adding new permissions/subpermissions and granting access to new features. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.