Bug 1269

Summary: Able to delete "SuperLibrarian" Admin with normal Circ Delete Patron command--quick one!
Product: Koha Reporter: Chris Cormack <chris>
Component: CirculationAssignee: Galen Charlton <gmcharlt>
Status: CLOSED FIXED QA Contact:
Severity: major    
Priority: P2    
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Description Chris Cormack 2010-05-20 23:40:48 UTC


---- Reported by drdrulm@yahoo.com 2007-01-05 10:18:54 ----

It seems that only an admin (SuperLibrarian) should be able to delete a Superlibrarian Account. Any circ staff could accidentally delete an admin (superlibraian) account (hide them from staff just in case?) such that the admin would not be able set permissions. There should be a quick check to make sure only an account with superlibrarian status can delete an account with superlibrarian status--not just an account with add/modify patron? This makes the add/modify patron a little dangerous.

Thank you,
-D.Ulm



---- Additional Comments From wrobertson1981@yahoo.co.nz 2007-01-28 16:45:47 ----

Fixed in rel_2_2, with default/en/members/deletemem.tmpl modified to give a new warning.



---- Additional Comments From jmf@liblime.com 2007-11-24 16:39:36 ----

re-assigning to ryan



---- Additional Comments From jmf@liblime.com 2007-12-04 10:54:46 ----

partial fix submitted, awaiting complete fix from ryan



---- Additional Comments From rch@liblime.com 2007-12-15 11:17:35 ----


Added 'Staff' category type.

The following properties of A Member of type Staff 
require the permission 'staffaccess' :

  * change userid/password.
  * delete borrower.

Note that it is up to you to set your staff to correct category type.




--- Bug imported by chris@bigballofwax.co.nz 2010-05-20 23:40 UTC  ---

This bug was previously known as _bug_ 1269 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=1269

Actual time not defined. Setting to 0.0
The original reporter of this bug does not have
   an account here. Reassigning to the person who moved
   it here: chris@bigballofwax.co.nz.
   Previous reporter was drdrulm@yahoo.com.
The original assignee of this bug does not have
   an account here. Reassigning to the default assignee
   for the component, gmcharlt@gmail.com.
   Previous assignee was rch@liblime.com.