[Koha-bugs] [Bug 7648] staff can make themselves superlibrarians

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7648

Chris Cormack <chris at bigballofwax.co.nz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |chris at bigballofwax.co.nz

--- Comment #1 from Chris Cormack <chris at bigballofwax.co.nz> ---
I don't think it's an oversight, if you trust people enough to let them set
staff permissions for others, including making others super librarians. I think
it's fair to trust them to not act unethically with their own permissions.

If you can't trust them to not escalate their own permissions, there is no way
you should give them permission to change others.

Maybe just fire people who act unethically.

-- 
You are receiving this mail because:
You are watching all bug changes.