Bug 4252

Summary: edit authorities permission not checked on 'More' list
Product: Koha Reporter: Nicole C. Engard <nengard>
Component: PatronsAssignee: Nicole C. Engard <nengard>
Status: CLOSED FIXED QA Contact: Bugs List <koha-bugs>
Severity: major    
Priority: PATCH-Sent (DO NOT USE) CC: chris, gmcharlt
Version: Main   
Hardware: PC   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Attachments: staff client with only circ permissions
patch
follow up patch

Description Chris Cormack 2010-05-21 01:24:58 UTC


---- Reported by nengard@gmail.com 2010-02-23 17:19:53 ----

Created an attachment
staff client with only circ permissions

When logged in as a patron without permissions to edit authorities I still see Authorities in the More Pull Down



--- Bug imported by chris@bigballofwax.co.nz 2010-05-21 01:24 UTC  ---

This bug was previously known as _bug_ 4252 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4252
Imported an attachment (id=1953)

Actual time not defined. Setting to 0.0
Setting qa contact to the default for this product.
   This bug either had no qa contact or an invalid one.
The original submitter of attachment 1953 [details] is unknown.
   Reassigning to the person who moved it here: chris@bigballofwax.co.nz.

Comment 1 Nicole C. Engard 2010-06-02 23:02:29 UTC Comment hidden (obsolete)
Comment 2 Galen Charlton 2010-06-04 00:32:15 UTC
(In reply to comment #1)
> Created attachment 2205 [details] [review]
> patch

CAN_user_editauthorities is the correct permission; please fix and resubmit.
Comment 3 Nicole C. Engard 2010-06-04 00:43:33 UTC
On the main page the cataloging permissions are checked - not the authorities - and so I will resubmit with a further edit to the patch to fix the main page as well.
Comment 4 Nicole C. Engard 2010-06-04 01:00:40 UTC
Created attachment 2214 [details] [review]
follow up patch

This patch not only fixes the 'more' menu, but also the main intranet page which also wasn't checking for authorities permissions.
Comment 5 Chris Cormack 2010-12-14 00:50:51 UTC
Pushed, please test