Bug 15660 - Prevent sharing budgets
Summary: Prevent sharing budgets
Status: CLOSED WORKSFORME
Alias: None
Product: Koha
Classification: Unclassified
Component: Acquisitions (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-01-25 18:59 UTC by Nicole C. Engard
Modified: 2023-12-28 20:42 UTC (History)
2 users (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: Sponsored
Comma delimited list of Sponsors:
Crowdfunding goal: 0
Crowdfunding committed: 0
Crowdfunding contact:
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nicole C. Engard 2016-01-25 18:59:49 UTC
* Prevent each library from seeing the budgets/funds of all other libraries

  * Modify C4::Budgets::GetBudgets to only select budgets for the logged in library unless the logged in user is a superlibrarian

  * Ensure the same checks are added to other budget modifying / using subroutines as needed
Comment 1 Katrin Fischer 2016-01-25 20:19:40 UTC
Hm, will this be optional? How is the owner of a budget determined?
Comment 2 Jessie Zairo 2023-03-30 16:41:15 UTC
This would be helpful to consortiums or large multibranch systems. Maybe adding an option to library groups to say "Hide budget or fund information for librarians outside of this group."
Comment 3 Katrin Fischer 2023-04-23 16:03:20 UTC
I think this actually already works. You need to make sure the users don't have budget_manage_all and then limit the funds to library (and optionally to fund and user). That will also affect visibility on the start page. I have tested it a few times and it works.

Nicole's original report was from 2016, I think it might not have worked back then.

Wondering if another level of permissions would be needed here - permission control in acq is already very granular, it might makes things more complicated?