[Koha-bugs] [Bug 22868] Circulation staff with suggestions_manage can have access to acquisition data

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22868

--- Comment #21 from Marie-Luce Laflamme <marie-luce.laflamme at inlibro.com> ---
I've tested the patch and here are my results...

- a patron with a super librarian permission can manage and add suggestion
- a patron without "suggestion management" permission cannot add suggestion



There is a tiny issue with the 3rd type of patron account...

- patron with several permissions (including "suggestion management") can add
suggestion, but it also has the ability to "manage suggestions" (accept or
reject suggestions) when you click on "Back to suggestion."


To reproduce:
Create a patron with "suggestion management" permission (see previous comment
for details)
Apply the patch
Login with a patron who has the "suggestion management" permission
Find a patron account.
Click on "Purchase suggestion" and Add a suggestion.
After submitting the suggestion, click on the title of the suggestion to assess
the request.
At the bottom of the suggestion form, click on "Back to suggestion"

After clicking on "Back to suggestion", you are sent to the "Suggestion
Management" page (Acquisition > Suggestion), where you can accept or reject
suggestions.

-- 
You are receiving this mail because:
You are watching all bug changes.