[Koha-bugs] [Bug 16231] Correct permission handling in subscription edit menu
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Sun May 8 14:01:39 CEST 2016
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16231
Katrin Fischer <katrin.fischer at bsz-bw.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|Signed Off |Failed QA
--- Comment #11 from Katrin Fischer <katrin.fischer at bsz-bw.de> ---
Maybe my first test here was flawed. This is something I see retesting this:
- Set independentbranches to prevent
- Make sure staff patron doesn't have superserials permission
= I should not be allowed to change serials from other branches
- Go to another branches subscription (by URL manipulation)
- With the patches I can: renew (opens wrong window?), receive (ew!) and DELETE
- Without the patch on master, I can't delete (better)
I'd say this is a change of the behaviour that we don't want - allowing
deletions. But overall... permission handling in serials could still be
improved a lot.
Can we find a good fix for delete here and then see about the other problems
later?
--
You are receiving this mail because:
You are watching all bug changes.
More information about the Koha-bugs
mailing list