[Koha-bugs] [Bug 6676] Acquisition basket access control trivially by-passable

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6676

--- Comment #1 from Mason James <mtj at kohaaloha.com> 2011-08-08 21:46:50 UTC ---
Created attachment 4900
  --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=4900
.

there are 3 user-permission settings to control access to acq-baskets

•  group_manage Manage orders & basketgroups
•  order_manage Manage orders & basket
•  order_receive Manage orders & basket


have you tested accessing a basket, with all 3 settings 'off'?

-- 
Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA Contact for the bug.