[Koha-bugs] [Bug 15823] New: Can still access patron discharge slip without having the syspref on - Permissions breach

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Tue Feb 16 02:12:05 CET 2016


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15823

            Bug ID: 15823
           Summary: Can still access patron discharge slip without having
                    the syspref on - Permissions breach
 Change sponsored?: ---
           Product: Koha
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Patrons
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: aleishaamohia at hotmail.com
        QA Contact: testopia at bugs.koha-community.org
                CC: gmcharlt at gmail.com, kyle.m.hall at gmail.com

To reproduce:

Ensure that useDischarge syspref is off.
Go to cgi-bin/koha/members/discharge.pl?borrowernumber=X
Confirm that you are still able to access this page and generate discharge
slip.
This is a permissions breach

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.


More information about the Koha-bugs mailing list