[Bug 37435] New: Cannot renew patron from moremember.pl without circulate permissions
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Bug ID: 37435 Summary: Cannot renew patron from moremember.pl without circulate permissions Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Patrons Assignee: koha-bugs@lists.koha-community.org Reporter: lucas@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org CC: gmcharlt@gmail.com, kyle.m.hall@gmail.com To recreate: 1. Have a staff account with limited permissions: -Staff access ( catalouge ) -Add, modify and view patron information (borrowers) -NO circulate permissions 2. Log in as that staff user and find a patron with an expired account. 3. See the warning "Expiration: Patron's card has expired. Renew or Edit details". 4. Try clicking on Renew, you are logged out and see "Error: You do not have permission to access this page." -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 hebah@bywatersolutions.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hebah@bywatersolutions.com -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Lucas Gass <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs@lists.koha-commun |cubingguy714@gmail.com |ity.org | -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Eric Garcia <cubingguy714@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |Needs Signoff Patch complexity|--- |Trivial patch -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 --- Comment #1 from Eric Garcia <cubingguy714@gmail.com> --- Created attachment 169439 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=169439&action=edit Bug 37435: Fixed renew patron from moremember.pl without circulate permissions To recreate: 1. Have a staff account with limited permissions: -Staff access ( catalouge ) -Add, modify and view patron information (borrowers) -NO circulate permissions 2. Log in as that staff user and find a patron with an expired account. 3. See the warning "Expiration: Patron's card has expired. Renew or Edit details". 4. Try clicking on Renew, you are logged out and see "Error: You do not have permission to access this page." To test: 1. Apply patch 2. From the expired patron's details page see the warning and click Renew 3. Notice it renews the patron and returns to the patron details page 4. Details -> Edit -> Set the expiration date so that the patron is expired 5. Go back to your staff patron and check 'Check out and check in items' permission 6. In your expired patron's page -> Check out -> See warning -> Renew 7. Notice it renews the patron and returns to the check out page 8. Set the expired patron's expiration date so that it expires soon 9. Uncheck 'Check out and check in items' permission for your staff patron 10. Confirm the warning for your patron now is "Expiration: Patron's card expires on (DATE). Renew or Edit details" 11. Repeat steps 2-7 and notice it returns to the correct pages -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Roman Dolny <roman.dolny@jezuici.pl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Signed Off -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Roman Dolny <roman.dolny@jezuici.pl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #169439|0 |1 is obsolete| | --- Comment #2 from Roman Dolny <roman.dolny@jezuici.pl> --- Created attachment 169513 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=169513&action=edit Bug 37435: Fixed renew patron from moremember.pl without circulate permissions To recreate: 1. Have a staff account with limited permissions: -Staff access ( catalouge ) -Add, modify and view patron information (borrowers) -NO circulate permissions 2. Log in as that staff user and find a patron with an expired account. 3. See the warning "Expiration: Patron's card has expired. Renew or Edit details". 4. Try clicking on Renew, you are logged out and see "Error: You do not have permission to access this page." To test: 1. Apply patch 2. From the expired patron's details page see the warning and click Renew 3. Notice it renews the patron and returns to the patron details page 4. Details -> Edit -> Set the expiration date so that the patron is expired 5. Go back to your staff patron and check 'Check out and check in items' permission 6. In your expired patron's page -> Check out -> See warning -> Renew 7. Notice it renews the patron and returns to the check out page 8. Set the expired patron's expiration date so that it expires soon 9. Uncheck 'Check out and check in items' permission for your staff patron 10. Confirm the warning for your patron now is "Expiration: Patron's card expires on (DATE). Renew or Edit details" 11. Repeat steps 2-7 and notice it returns to the correct pages Signed-off-by: Roman Dolny <roman.dolny@jezuici.pl> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Emily Lamancusa <emily.lamancusa@montgomerycountymd.gov> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #169513|0 |1 is obsolete| | --- Comment #3 from Emily Lamancusa <emily.lamancusa@montgomerycountymd.gov> --- Created attachment 169567 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=169567&action=edit Bug 37435: Fixed renew patron from moremember.pl without circulate permissions To recreate: 1. Have a staff account with limited permissions: -Staff access ( catalouge ) -Add, modify and view patron information (borrowers) -NO circulate permissions 2. Log in as that staff user and find a patron with an expired account. 3. See the warning "Expiration: Patron's card has expired. Renew or Edit details". 4. Try clicking on Renew, you are logged out and see "Error: You do not have permission to access this page." To test: 1. Apply patch 2. From the expired patron's details page see the warning and click Renew 3. Notice it renews the patron and returns to the patron details page 4. Details -> Edit -> Set the expiration date so that the patron is expired 5. Go back to your staff patron and check 'Check out and check in items' permission 6. In your expired patron's page -> Check out -> See warning -> Renew 7. Notice it renews the patron and returns to the check out page 8. Set the expired patron's expiration date so that it expires soon 9. Uncheck 'Check out and check in items' permission for your staff patron 10. Confirm the warning for your patron now is "Expiration: Patron's card expires on (DATE). Renew or Edit details" 11. Repeat steps 2-7 and notice it returns to the correct pages Signed-off-by: Roman Dolny <roman.dolny@jezuici.pl> Signed-off-by: Emily Lamancusa <emily.lamancusa@montgomerycountymd.gov> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Emily Lamancusa <emily.lamancusa@montgomerycountymd.gov> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |emily.lamancusa@montgomeryc | |ountymd.gov Status|Signed Off |Passed QA --- Comment #4 from Emily Lamancusa <emily.lamancusa@montgomerycountymd.gov> --- Looks good, fixes the problem and QA tool passes. Passing QA. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|testopia@bugs.koha-communit |emily.lamancusa@montgomeryc |y.org |ountymd.gov CC| |martin.renvoize@ptfs-europe | |.com -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)| |24.11.00 released in| | -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 --- Comment #5 from Martin Renvoize <martin.renvoize@ptfs-europe.com> --- Thanks for all the hard work! Pushed to main for the next 24.11.00 release as RM Assistant -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Cannot renew patron from |Cannot renew patron from |moremember.pl without |details page in patron |circulate permissions |account without circulate | |permissions -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Lucas Gass <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable Version(s)|24.11.00 |24.11.00,24.05.04 released in| | --- Comment #6 from Lucas Gass <lucas@bywatersolutions.com> --- Backported to 24.05.x for upcoming 24.05.04 -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Fridolin Somers <fridolin.somers@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fridolin.somers@biblibre.co | |m Status|Pushed to stable |Pushed to oldstable Version(s)|24.11.00,24.05.04 |24.11.00,24.05.04,23.11.09 released in| | --- Comment #7 from Fridolin Somers <fridolin.somers@biblibre.com> --- Pushed to 23.11.x for 23.11.09 Had to adapt because in 23.11 op=modify instead of op=edit_form -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 wainuiwitikapark@catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |wainuiwitikapark@catalyst.n | |et.nz --- Comment #8 from wainuiwitikapark@catalyst.net.nz --- Not backporting to 23.05.x unless requested -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37435 Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldstable |Needs documenting --- Comment #9 from Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz> --- Not backporting to 22.11 unless requested -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org