[Koha-bugs] [Bug 11911] purchase suggestions permission can be bypassed

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11911

Katrin Fischer <katrin.fischer at bsz-bw.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |katrin.fischer at bsz-bw.de
            Version|3.12                        |master

--- Comment #1 from Katrin Fischer <katrin.fischer at bsz-bw.de> ---
Suggestions are tied to a very low level permission:
flagsrequired   => { catalogue => 1 }

So everyone can access the page, even without any acq related permission.

I think fixing this cleanly we should add a permission for the suggestions and
make sure its set for all existing staff.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.