[Koha-bugs] [Bug 7310] Improving permissions on lists (virtual shelves)

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7310

--- Comment #13 from M. de Rooy <m.de.rooy at rijksmuseum.nl> 2012-02-20 08:46:01 UTC ---
TEST PLAN for first five patches (from wiki):

Login with user 2 in staff. Create user 1 for opac (to be deleted at the end).
Enable OpacAllowPublicListCreation.

Login with user 1 in opac. Add a private list V1 via shelves screen. Add a
private list V2 via search results, Add to combo. Add some items to both lists.
Add a public list P1 via shelves, P2 via search results (Save to another list).
Add some items.

Login with user 2 in staff. Goto Lists. Check P1 and P2. Try to rename or
delete (should be impossible). Add some items via catalog detail and search
results (should be possible). Add private V3 via shelves, private V4 via search
results, public P3. Add some items.

Login with user 1 in opac. Try to rename or delete P3 (should not be possible).
Add items to P3 (should be possible). Try to delete an item from P3 that you
did not add (user 2 did): should not be possible. Delete an item that you added
yourself (should be possible). Delete list V1.

Login with user 2 in staff. Delete list P3. Try to delete all items from P2
(only the ones you added should be deleted). Delete patron user 1. Check if you
still have P1 and P2. Check items on P2. 

Login with user 2 in opac. Check again if you still have P1 and P2. Check items
on P2.

Login with user 2 in staff. Disable OpacAllowPublicListCreation. 

Login with user 2 in opac. Try to add a public list via shelves, search results
(AddTo combo: New List) and search results (Save to another list). Should not
be possible.

Logout with user 2 in opac. You are anonymous user now. Check lists P1 and P2
(you should see items). Try to delete a list or delete an entry from a list.
(Should not be possible.) Try to create a list. Try to add an item to P1 via
search results, opac detail (should not be possible).

-- 
Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.