[Koha-bugs] [Bug 23872] ManaKB Permissions can be subverted

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23872

--- Comment #2 from Martin Renvoize <martin.renvoize at ptfs-europe.com> ---
Test plan

1) Add a new user with 'manage_sysprefs' permission.
2) Note that this user can change Mana related sytem preferences via `Home ›
Administration › System preferences > Web services > Mana KB` regardless of
whether that also have the `manage_mana` permission or not.

Note: This is actually the same case for HEA prefs too.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.