Bug 37228

Summary: API endpoint to set password for patron requires full borrowers permission, but should only require 'edit_borrowers'
Product: Koha Reporter: Emily Lamancusa (emlam) <emily.lamancusa>
Component: REST APIAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact:
Severity: normal    
Priority: P5 - low CC: tomascohen
Version: Main   
Hardware: All   
OS: All   
See Also: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36988
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Description Emily Lamancusa (emlam) 2024-07-01 18:04:39 UTC
On the staff side, a user with only edit_borrowers permission can change the password on a patron account. That should be sufficient for changing the password via API as well.