[Koha-bugs] [Bug 10799] Able to change logged in user

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10799

Owen Leonard <oleonard at myacpl.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|unspecified                 |master

--- Comment #2 from Owen Leonard <oleonard at myacpl.org> ---
Note that this problem isn't a problem just with the demo system linked above,
but with any system running master (or before, probably). In order to reproduce
the problem you have to have the AutoSelfCheckAllowed preference set to "allow
the web-based self checkout system to automatically login with this staff
login..." and have staff login credentials saved.

So it's not exactly the case that one is able to change the logged in user--the
staff user must be logged in for the self checkout to work. It's more a
question of whether there should be a built-in way to prevent the self checkout
user from accessing a regular OPAC session.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.