[Koha-bugs] [Bug 6802] New: with IndependantBranches on can still edit items

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6802

             Bug #: 6802
           Summary: with IndependantBranches  on can still edit items
    Classification: Unclassified
 Change sponsored?: ---
           Product: Koha
           Version: master
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: critical
          Priority: P5
         Component: Cataloging
        AssignedTo: gmcharlt at gmail.com
        ReportedBy: nengard at gmail.com
         QAContact: koha-bugs at lists.koha-community.org
                CC: ian.walls at bywatersolutions.com


When you're logged in to Koha with IndependantBranches turned on you shouldn't
be able to edit other people's items, but there is a way around this.  Even
though you don't see the edit and delete links next to the items on this page:
/cgi-bin/koha/cataloguing/additem.pl?biblionumber=509 you can click on an item
and the edit and delete links show up - once that happens you can click edit
and when you go to edit the item it forces the branch to be changed to yours -
all bad things.

I have a video, but jing isn't letting me upload it right now, so I'll add it
if necessary.

-- 
Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA Contact for the bug.