[Koha-bugs] [Bug 10679] New: Lists interface offers delete option when user doesn't have permission

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10679

            Bug ID: 10679
           Summary: Lists interface offers delete option when user doesn't
                    have permission
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5 - low
         Component: Lists
          Assignee: m.de.rooy at rijksmuseum.nl
          Reporter: oleonard at myacpl.org
        QA Contact: testopia at bugs.koha-community.org
                CC: m.de.rooy at rijksmuseum.nl

In both the OPAC and the staff client a "allowremovingitems" variable is used
in the template to determine whether the logged in user should be able to
delete items from a list. In both the OPAC and staff client this variable is
true when it should be false. Fortunately the user can't actually remove
something from the list. Instead the page returns an error message. However,
the "remove" option should not be visible in that case.

To confirm this bug, log in to the OPAC or staff client and open a public list
which was created by another user. The "remove from list" option will be
available but submitting the form will return an error like "You could not
delete any selected items from this shelf."

-- 
You are receiving this mail because:
You are watching all bug changes.