Bug 39376

Summary: Adding Private Lists in the staff interface should require a permission
Product: Koha Reporter: David Cook <dcook>
Component: ListsAssignee: Laura Escamilla <Laura.escamilla>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: normal    
Priority: P5 - low CC: Laura.escamilla, m.de.rooy
Version: Main   
Hardware: All   
OS: All   
See Also: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13888
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39372
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39238
GIT URL: Change sponsored?: ---
Patch complexity: --- Documentation contact:
Documentation submission: Text to go in the release notes:
Version(s) released in:
Circulation function:

Description David Cook 2025-03-19 03:32:51 UTC
At the moment, any staff user can create public and private lists - without any specific "Lists" permissions. 

There should be 2 new permissions "create_public_lists" and "create_private_lists".
Comment 1 David Cook 2025-03-21 00:43:10 UTC
Actually bug 13888 did add create_public_lists. I'll have to review this...
Comment 2 David Cook 2025-03-21 03:36:56 UTC
So we have create_public_lists in 24.11+ which is good.

I think we should have a create_private_lists permission still, since you may not want staff to be able to create private lists.