[Koha-bugs] [Bug 5505] New: A cataloger assigned to one library can delete all items

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5505

           Summary: A cataloger assigned to one library can delete all
                    items
 Change sponsored?: ---
           Product: Koha
           Version: rel_3_2
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P5
         Component: Cataloging
        AssignedTo: gmcharlt at gmail.com
        ReportedBy: spalding at senylrc.org
         QAContact: koha-bugs at lists.koha-community.org
                CC: ian.walls at bywatersolutions.com
   Estimated Hours: 0.0


This cataloger has the following permissions

catalogue View Catalog (Librarian Interface)
borrow Borrow books
edit_catalogue Edit catalog (Modify bibliographic/holdings data)
edit_items Edit Items
fast_cataloging Fast cataloging
management Set library management parameters
edit_calendar Define days when the library is closed
edit_news Write news for the OPAC and staff interfaces
inventory Perform inventory (stocktaking) of your catalog
label_creator Create printable labels and barcodes from catalog and patron data 
execute_reports Execute SQL reports

While on the normal tab, if they click edit items and get the screen listing
items they our limited to edit and deleting their own item.

But if they our on the normal tab and click on delete all items they will
actually delete all items.

-- 
Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.