Bug 36485

Summary:	Automatic linking in reports should respect permissions
Product:	Koha	Reporter:	Ray Delahunty <r.delahunty>
Component:	System Administration	Assignee:	Bugs List <koha-bugs>
Status:	NEW ---	QA Contact:	Testopia <testopia>
Severity:	enhancement
Priority:	P5 - low	CC:	gmcharlt
Version:	22.11
Hardware:	All
OS:	All
Change sponsored?:	---	Patch complexity:	---
Documentation contact:		Documentation submission:
Text to go in the release notes:		Version(s) released in:
Circulation function:

Description Ray Delahunty 2024-04-02 06:59:48 UTC

In 22.05 the fix to Bug 5697 does simplify the linking so that biblio.biblionumber provides a link to Edit record and View record. However if a staff member does not have Edit Catalogue permission and selects Edit record (rather than just View record) the new tab opens but the staff member is force logged-out of Koha due to lack of permissions. The Edit option should only display (for biblionumber, itemnumber, borrowernumber and cardnumber) where the appropriate permissions are set for the logged-in user.