[Koha-bugs] [Bug 10679] Lists interface offers delete option when user doesn' t have permission

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10679

Aleisha Amohia <aleishaamohia at hotmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #60228|0                           |1
        is obsolete|                            |

--- Comment #6 from Aleisha Amohia <aleishaamohia at hotmail.com> ---
Created attachment 60364
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=60364&action=edit
Bug 10679: Hide delete option for lists if user does not have permission and
has not added any items to that list

Taking from Comment 5, if a list once had permissions for people to add
and remove entries, but then later the owner changes it so that others
can no longer add entries, users should be able to delete the entries
they added previously.

This patch checks that the logged in user is the same account as the
borrower who added the entry to the list. If they are, the button to
remove should show. Attempting to delete any records they did not add
will fail, but attempting to delete the records they did add will
succeed. If they did not add any records to a list, the button to remove
will not show.

To test:
1) Make TWO public lists. Set all permissions to 'Allow' on one list and
all permissions to 'Do not allow' on the other list.
2) Add one or two items to both lists.
3) Log in as a different user. Add one or two items to the list that you
have permission to add to.
4) Log back in as the original user and set all permissions on the
'Allow' list to 'Do not allow'
5) Log back in as the different user. Go to the list you added entries
to
6) The button to remove should show and you should be able to delete
your entries only.
7) There should be no button to remove on the other list that you have
added nothing to.

Sponsored-by: Catalyst IT

-- 
You are receiving this mail because:
You are watching all bug changes.