Summary: | Add users private list management functionality for administrators | ||
---|---|---|---|
Product: | Koha | Reporter: | Frédéric Demians <f.demians> |
Component: | Lists | Assignee: | Galen Charlton <gmcharlt> |
Status: | CLOSED DUPLICATE | QA Contact: | Bugs List <koha-bugs> |
Severity: | enhancement | ||
Priority: | P5 - low | CC: | m.de.rooy, marjorie.barry-vila, oleonard |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
See Also: |
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9833 http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12838 http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13417 |
||
Change sponsored?: | --- | Patch complexity: | --- |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: | |||
Bug Depends on: | |||
Bug Blocks: | 7310 |
Description
Frédéric Demians
2011-02-15 18:31:03 UTC
I see a major privacy issue with this. I think it would be great to delete lists of users who have been deleted, but I don't like the idea of librarians being able to access user lists at all. (In reply to comment #1) > I see a major privacy issue with this. I think it would be great to > delete lists of users who have been deleted, but I don't like the idea > of librarians being able to access user lists at all. Good point. Thanks. And controlling access via Koha permissions in order to control which librarians are allowed to see/manage lists of users? In any case, even if there is a technical barrier, anyone having access to Reports can see users private lists. This duplicates Bug 5487, but since the discussion is here I'll mark the other the duplicate. Librarians already have access to patrons' contact information and checkout history. I don't see how giving them access to patrons' lists is any different. My suggestion in Bug 5487 was specifically for a granular permission giving access to patrons' lists. If we don't want to give access to the contents, we should at least be able to edit the title (in the case of inappropriate language) or delete the whole list (in the case of inactive patrons). *** Bug 5487 has been marked as a duplicate of this bug. *** Owen, if the patron chooses not to let the library have their circulation history then they don't have access to that anymore and I see lists in the same light. Maybe lists needs to be part of the opac privacy settings. > Owen, if the patron chooses not to let the library have their circulation
> history ...
History, maybe, but current checkouts are always known to the staff.
True. I don't really care either way, I just know that many librarians will care and many paranoid patrons will care as well. Since we have a mechanism for privacy, why not let patrons decide if librarians can see their list contents? There is now a way to delete public lists covered by a separate permission. (In reply to Katrin Fischer from comment #8) > There is now a way to delete public lists covered by a separate permission. We can close this bug now. See bug 13417. *** This bug has been marked as a duplicate of bug 13417 *** |