https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38540 Bug ID: 38540 Summary: Checkout override allowed without permissions when item has parts / materials specified Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Circulation Assignee: koha-bugs@lists.koha-community.org Reporter: andrew@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com, kyle.m.hall@gmail.com Koha will allow a user who does not have force_checkout permissions to check out to a user with fines over the NoIssuesCharge amount if the item to be checked out has a value in items.materials has content. To confirm: 1- set AllowFineOverride to Allow, confirm there is a value in NoIssuesCharge 2- have a user with circulate_remaining_permissions but not force_checkout 3- have a patron with fines over the NoIssuesCharge amount 4- have two items: Item A does not have a value in items.materials, Item B does 5- log in as your user, find your patron 6- attempt to check Item A out to your patron, Koha tells you "Cannot check out" and "Patron has a debt" 7- attempt to check out Item B, Koha says "Please confirm checkout," tells you about the debt and the materials note This happens whether or not CircConfirmItemParts is on. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.