[Koha-bugs] [Bug 2035] Staff can add items to a patron's 'private' list from the 'Lists' module...

[bugzilla-daemon at pippin.metavore.com]

http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=2035





------- Comment #1 from tina.burger at liblime.com  2008-04-23 12:25 -------
(In reply to comment #0)
> Any staff member can add an item to a private list created by a patron by 
> clicking on the list name and scanning a barcode in the "Lists' management
> module. 
> 
> They shouldn't be able to add items to 'private' lists, only delete the list.
> 

Also, staff should not be able to 'view' a 'private' list that is now their
own: they should ONLY be able to delete a list. 




------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.