Bug 1269 - Able to delete "SuperLibrarian" Admin with normal Circ Delete Patron command--quick one!
Summary: Able to delete "SuperLibrarian" Admin with normal Circ Delete Patron command-...
Status: CLOSED FIXED
Alias: None
Product: Koha
Classification: Unclassified
Component: Circulation (show other bugs)
Version: Main
Hardware: All All
: P2 major
Assignee: Galen Charlton
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-01-05 10:18 UTC by Chris Cormack
Modified: 2012-10-25 01:08 UTC (History)
0 users

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Cormack 2010-05-20 23:40:48 UTC


---- Reported by drdrulm@yahoo.com 2007-01-05 10:18:54 ----

It seems that only an admin (SuperLibrarian) should be able to delete a Superlibrarian Account. Any circ staff could accidentally delete an admin (superlibraian) account (hide them from staff just in case?) such that the admin would not be able set permissions. There should be a quick check to make sure only an account with superlibrarian status can delete an account with superlibrarian status--not just an account with add/modify patron? This makes the add/modify patron a little dangerous.

Thank you,
-D.Ulm



---- Additional Comments From wrobertson1981@yahoo.co.nz 2007-01-28 16:45:47 ----

Fixed in rel_2_2, with default/en/members/deletemem.tmpl modified to give a new warning.



---- Additional Comments From jmf@liblime.com 2007-11-24 16:39:36 ----

re-assigning to ryan



---- Additional Comments From jmf@liblime.com 2007-12-04 10:54:46 ----

partial fix submitted, awaiting complete fix from ryan



---- Additional Comments From rch@liblime.com 2007-12-15 11:17:35 ----


Added 'Staff' category type.

The following properties of A Member of type Staff 
require the permission 'staffaccess' :

  * change userid/password.
  * delete borrower.

Note that it is up to you to set your staff to correct category type.




--- Bug imported by chris@bigballofwax.co.nz 2010-05-20 23:40 UTC  ---

This bug was previously known as _bug_ 1269 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=1269

Actual time not defined. Setting to 0.0
The original reporter of this bug does not have
   an account here. Reassigning to the person who moved
   it here: chris@bigballofwax.co.nz.
   Previous reporter was drdrulm@yahoo.com.
The original assignee of this bug does not have
   an account here. Reassigning to the default assignee
   for the component, gmcharlt@gmail.com.
   Previous assignee was rch@liblime.com.