https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37973 Bug ID: 37973 Summary: Users can easily circumvent the restricted item subfields Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Cataloging Assignee: koha-bugs@lists.koha-community.org Reporter: lucas@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org CC: m.de.rooy@rijksmuseum.nl To recreate: 1. Add some 952 subfields to SubfieldsToAllowForRestrictedEditing 2. Find or create a user with edit_items and edit_items_restricted permissions. 3. Log in as that user and edit an item. 4. Find one of the restricted fields and remove the readonly attribute via the browsers devtools. 5. Edit the field and save. We should block the editing of restricted subfields at a higher level. Maybe throw and exception? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.