[Koha-bugs] [Bug 23666] Add API route for additional patron attributes

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23666

--- Comment #14 from Tomás Cohen Arazi <tomascohen at gmail.com> ---
(In reply to Joonas Kylmälä from comment #13)
> The patch set didn't apply so I had a bit hard time understanding what was
> going on. But now even more reading of the code and the patches from bug
> 27857 which this depends on I see that the deletion of attributes and adding
> of the new ones is all in one transaction in the
> Koha::Patron::extended_attributes() function so actually it works all just
> fine because throwing the exception would trigger the rollback. Sorry for
> the noise.

27833
27858
27857
23666

^^ that's what I have on my branch, in that order.

> > I think I found a place in which is was possible to see the attributes without much permissions.
> 
> Please let us know if there is such a place. I couldn't find and it would be
> super scary if that was the case because these contain patron specific info
> which should be private (ie. borrowers permission required)!

Yeah, I cannot find that. I thought it was moremember.pl but it isn't.

> Tomás, I'm moving this to assigned?

Yes, I will adjust those permissions.

-- 
You are receiving this mail because:
You are watching all bug changes.