| Summary: | Public Virtual Shelf can be Modified / Deleted by any non-logged in patron | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Chris Cormack <chris> |
| Component: | Lists | Assignee: | Galen Charlton <gmcharlt> |
| Status: | CLOSED WORKSFORME | QA Contact: | Bugs List <koha-bugs> |
| Severity: | major | ||
| Priority: | P3 | ||
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
|
Description
Chris Cormack
2010-05-21 01:06:19 UTC
I see no way for a non-logged-in patron to edit a shelf. I also tried opening up a list edit page as a logged-in patron, logging out in another browser tab, and trying to submit the open edit page. I was told "You do not have adequate permission for that action." Can anyone reproduce this in an up-to-date installation? |