[Koha-bugs] [Bug 10888] Don't hide authorities module from users without permission to edit authorities

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10888

Paola Rossi <paola.rossi at cineca.it> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Needs Signoff               |In Discussion
                 CC|                            |paola.rossi at cineca.it

--- Comment #4 from Paola Rossi <paola.rossi at cineca.it> ---
I installed the patch.
It works fine with the "editauthorities" permission.
Without the "editauthorities" permission, the search works well, while the save
option doesn't work and sends the session in "you're not permitted" webpage.

The save option sends you to this link:
/cgi-bin/koha/authorities/export.pl?format=mads&op=export&authid=1

The cgi export.pl, under "authorities", is affected by "editauthorities"
permission.

So I can't sign off.

In my opinion the patch is not complete; we have two options in the case of no
"editauthorities" permission:
1) authority search results should show no edit or delete link or save link;
2) a new specific permission is required, to search and to save too.

-- 
You are receiving this mail because:
You are watching all bug changes.