[Koha-bugs] [Bug 24841] REST API should check if patron is restricted/debarred

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24841

Nick Clemens <nick at bywatersolutions.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |nick at bywatersolutions.com

--- Comment #5 from Nick Clemens <nick at bywatersolutions.com> ---
The holds route is privileged, not public - it behaves as staff, not as OPAC -
so it doesn't check if patron restricted/debarred

We have had the issue come up with Aspen discovery layer as well, but I think
we want is either a route for the patron placing their own holds, or a way to
tell the API to act as if it is the opac.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.