[Koha-bugs] [Bug 23666] Add API route for additional patron attributes

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23666

Joonas Kylmälä <joonas.kylmala at helsinki.fi> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Needs Signoff               |ASSIGNED

--- Comment #13 from Joonas Kylmälä <joonas.kylmala at helsinki.fi> ---
The patch set didn't apply so I had a bit hard time understanding what was
going on. But now even more reading of the code and the patches from bug 27857
which this depends on I see that the deletion of attributes and adding of the
new ones is all in one transaction in the Koha::Patron::extended_attributes()
function so actually it works all just fine because throwing the exception
would trigger the rollback. Sorry for the noise.

> I think I found a place in which is was possible to see the attributes without much permissions.

Please let us know if there is such a place. I couldn't find and it would be
super scary if that was the case because these contain patron specific info
which should be private (ie. borrowers permission required)!

Tomás, I'm moving this to assigned?

-- 
You are receiving this mail because:
You are watching all bug changes.