Bug 14848 - Fund level user restriction is not working
Summary: Fund level user restriction is not working
Status: CLOSED WORKSFORME
Alias: None
Product: Koha
Classification: Unclassified
Component: Acquisitions (show other bugs)
Version: 3.20
Hardware: PC Linux
: P5 - low enhancement (vote)
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-09-18 09:36 UTC by Mirash O S
Modified: 2021-06-14 21:28 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mirash O S 2015-09-18 09:36:48 UTC
I created a Budget with TWO source of fund. The first source is owned and managed solely by the superlibrarian and the second fund to be managed by a superlibrarian and another user.

I have given acquisition permission to the particular user. While creating the second fund, I added the superlibrarian and the other user to manage acquisition using this fund. 

But when trying the do acquisition of a book,  both users are allowed to acquire books from both the funds. 

The second user is to be allowed to procure from the 2nd fund only.
Comment 1 Kelly McElligott 2020-06-03 15:50:31 UTC
This is still relevant in 19.05.  Creating a fund restricting to the owner, users and library all seem to be not applying when using a fund logged in (as not the owner, user or library)

In addition, the funds that are specific to a library (through the Fund setup) are still showing to Baskets created at other libraries.
Comment 2 Katrin Fischer 2020-09-13 10:20:20 UTC
Hi Kelly,

I just tested this and it seems to work fine for me:

1) Create a new user (Henry) that is
  - not superlibrarian
  - doesn't have the budget_manage_all permission
  - home library is "Midway"

2) Create a new fund
  - limited to owner, user, library
  - Library is "Centerville"
  - User is "Henry"

3) Log in with Henry in another browser
  - Although the home library and fund library mismatch, Henry as fund user can see the fund. = OK

4) Remove Henry from fund owner list
  - Henry can no longer see the fund. = OK

5) Add Henry as fund owner
  - Henry can see the fund again = OK

6) Remove Henry as fund owner but change his home library to "Centerville"
  - Log out and log in again to make sure branch is selected correctly
  - Henry can see the funds for his library = OK

I believe a problem in testing this could have been the budget_manage_all permission. Closing WORKSFORME.
Comment 3 Kelly McElligott 2020-09-14 18:35:41 UTC
yes Katrin- that was it!