Summary: | Staff without edit_borrower permission still see patron information | ||
---|---|---|---|
Product: | Koha | Reporter: | Donna <bwsdonna> |
Component: | Patrons | Assignee: | Bugs List <koha-bugs> |
Status: | NEW --- | QA Contact: | Testopia <testopia> |
Severity: | normal | ||
Priority: | P5 - low | CC: | dcook, george, gmcharlt, jonathan.druart, kyle.m.hall, lauren_denny, nick, rcoert |
Version: | unspecified | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | --- |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: |
Description
Donna
2021-07-07 20:14:58 UTC
I don't think that this really makes sense. Arguably "edit_borrowers" could be changed to just "add and modify" patron information, but if we want to restrict viewing patron information, then there should probably be a new permission to control that. Of course, that wouldn't be backwards compatible, so that probably wouldn't happen. Maybe a system preference in addition to a new permission I suppose... I agree with Donna that, since the edit_borrowers permission says "Add, modify and view patron information" it should actually work that way. If, as David suggests, the wording in the description were changed, then I would want a separate permission that controls "view patron information" because we have staff at 50+ libraries that are currently restricted from viewing borrower address information that we need to continue to restrict from viewing address information. For what it's worth, off the top of my head, it would be a massive long expensive development with little chance of success to hide the borrower information as desired. I could be wrong, but that's my first instinct. I can also think of a few holes (like reports) that would probably be impossible to plug without completely rewriting entire modules in Koha, which would then break many workflows and expectations. But that's just my two cents. Someone else might have a good idea. |