[Koha-bugs] [Bug 26183] New: UpdateItemWhenLostFromHoldList should be limited in scope

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26183

            Bug ID: 26183
           Summary: UpdateItemWhenLostFromHoldList should be limited in
                    scope
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P5 - low
         Component: Staff Client
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: andrew at bywatersolutions.com
        QA Contact: testopia at bugs.koha-community.org
                CC: gmcharlt at gmail.com

UpdateItemWhenLostFromHoldList lets one update any value in the items table
when cancelling a hold from the Holds to Pull list. That includes things that
aren't normally editable. For instance, one can use it to change itemnumbers.
It doesn't seem likely anyone will set it up to do so, but the potential damage
is pretty severe.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.