[Koha-bugs] [Bug 18403] Hide patron information if not part of the logged in user library group

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Mon Apr 10 23:32:44 CEST 2017


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18403

--- Comment #6 from Jonathan Druart <jonathan.druart at bugs.koha-community.org> ---
Created attachment 62015
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=62015&action=edit
Bug 18403: Update permissions - borrowers => 1|* becomes borrowers =>
'edit_borrowers'

Test plan:
Login with a patron that only have the 'edit_borrowers' permission.
You should be able to access patron's information of patrons inside of your
group.

Technical note:
Before this patchset the borrowers permission module contains only 1 permission
'edit_borrowers'.
That meant
  borrowers => 1
and
  borrowers => '*'
had the same behavior.
Moreover, now that we have 2 permissions, 'CAN_user_borrowers' is set when all
permissions of 'borrowers' are set.
We need to update the different occurrences of these tests.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list