Bug 4252 - edit authorities permission not checked on 'More' list
Summary: edit authorities permission not checked on 'More' list
Status: CLOSED FIXED
Alias: None
Product: Koha
Classification: Unclassified
Component: Patrons (show other bugs)
Version: Main
Hardware: PC All
: PATCH-Sent (DO NOT USE) major (vote)
Assignee: Nicole C. Engard
QA Contact: Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-02-23 05:19 UTC by Nicole C. Engard
Modified: 2012-10-25 22:52 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments
staff client with only circ permissions (65.33 KB, image/png)
2010-02-23 17:19 UTC, Chris Cormack
Details
patch (1.34 KB, patch)
2010-06-02 23:02 UTC, Nicole C. Engard
Details | Diff | Splinter Review
follow up patch (3.73 KB, patch)
2010-06-04 01:00 UTC, Nicole C. Engard
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Cormack 2010-05-21 01:24:58 UTC


---- Reported by nengard@gmail.com 2010-02-23 17:19:53 ----

Created an attachment
staff client with only circ permissions

When logged in as a patron without permissions to edit authorities I still see Authorities in the More Pull Down



--- Bug imported by chris@bigballofwax.co.nz 2010-05-21 01:24 UTC  ---

This bug was previously known as _bug_ 4252 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4252
Imported an attachment (id=1953)

Actual time not defined. Setting to 0.0
Setting qa contact to the default for this product.
   This bug either had no qa contact or an invalid one.
The original submitter of attachment 1953 [details] is unknown.
   Reassigning to the person who moved it here: chris@bigballofwax.co.nz.

Comment 1 Nicole C. Engard 2010-06-02 23:02:29 UTC Comment hidden (obsolete)
Comment 2 Galen Charlton 2010-06-04 00:32:15 UTC
(In reply to comment #1)
> Created attachment 2205 [details] [review]
> patch

CAN_user_editauthorities is the correct permission; please fix and resubmit.
Comment 3 Nicole C. Engard 2010-06-04 00:43:33 UTC
On the main page the cataloging permissions are checked - not the authorities - and so I will resubmit with a further edit to the patch to fix the main page as well.
Comment 4 Nicole C. Engard 2010-06-04 01:00:40 UTC
Created attachment 2214 [details] [review]
follow up patch

This patch not only fixes the 'more' menu, but also the main intranet page which also wasn't checking for authorities permissions.
Comment 5 Chris Cormack 2010-12-14 00:50:51 UTC
Pushed, please test