[Koha-bugs] [Bug 13663] offline circ permission issue

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Tue Jun 9 16:15:43 CEST 2015


http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13663

--- Comment #9 from Alex Arnaud <alex.arnaud at biblibre.com> ---
Oh yes, indeed, just seen that could be a security problem.
So, why not check only catalogue permission (Which is the one required to
access staff interface iirc)? I feel better with that because we won't need to
update upload-file.pl and upload-file-progress.pl permissions each time we add
a new page requiring these files with an other permission.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list