[Bug 36061] New: With IndependentBranches on a non-superlibrarian cannot modify password
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36061 Bug ID: 36061 Summary: With IndependentBranches on a non-superlibrarian cannot modify password Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs@lists.koha-community.org Reporter: marie-luce.laflamme@inlibro.com QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com, kyle.m.hall@gmail.com When the IndependentBranches system preference is turned on, non-superlibrarian staff without the 'view_borrower_infos_from_any_libraries' permission cannot change the patron's passwords, even if those patrons are from the same library. With the current behaviour, it's impossible to reset passwords from the intranet if your library doesn't have a staff member with superlibrarian powers. There are other bugs on similar topic, see: bug 12793 and bug 12599. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36061 --- Comment #1 from Marie-Luce Laflamme <marie-luce.laflamme@inlibro.com> --- to test... Set-up - Ensure that the IndependentBranches system preference is turned on. - Add a new staff account with limited permissions to access the intranet minimum permissions required: - all (circulate) - access to staff interface (catalogue) - In borrowers, select only: - delete_borrowers - edit_borrowers --> do not check view_borrower_infos_from_any_libraries - all reserveforothers Test plan 1. Log in to the intranet using the newly created non-superlibrarian account. 2. Find a patron account from the same library as the logged-in staff account. 3. Click on "Modify password" --> Koha prevents this action and displays the message: "You do not have permission to edit this patron's login information." -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36061 --- Comment #2 from Marie-Luce Laflamme <marie-luce.laflamme@inlibro.com> --- It has recently come to my attention that there are certain scenarios I failed to consider during my testing of independentbranches and non-superlibrarian staff permissions. It turns out that you can change a "regular" patron password, but you can't do the same for another staff member when the permission "view_borrower_infos_from_any_libraries" is not granted. While this restriction may seem justified, it prompts the question: Should we think about adding a way for a library manager, who doesn't have superlibrarian powers but oversee staff actions, to change their staff members' passwords? -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36061 --- Comment #3 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- I thought staffaccess permission would allow this. Have you tested? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org