Bug 17883 - Manage Patron Lists Permission incorrectly displaying hidden columns
Summary: Manage Patron Lists Permission incorrectly displaying hidden columns
Status: CLOSED WORKSFORME
Alias: None
Product: Koha
Classification: Unclassified
Component: Staff interface (show other bugs)
Version: Main
Hardware: All All
: P5 - low minor (vote)
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords: Academy
Depends on:
Blocks:
 
Reported: 2017-01-11 13:58 UTC by Christian Stelzenmüller
Modified: 2018-12-03 20:04 UTC (History)
4 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments
User-with-permissions (157.86 KB, image/png)
2018-01-16 21:11 UTC, Grace
Details
User-without-permission (152.11 KB, image/png)
2018-01-16 21:12 UTC, Grace
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Stelzenmüller 2017-01-11 13:58:40 UTC
Users who do NOT have the permission “Manage Patron Lists” are able to see and edit columns in a patron search result list which have been set to “hidden” by default. This should not be the case.

To reproduce:

1.       Go to > Administration > Column Settings > Patrons
2.       In member (id = memberresultst) set “library” to “hidden by default” and “cannot be toggled”.
3.       Log in as user with permission “manage patron lists”. Perform patron search – “library” column is hidden and cannot be toggled.
4.       Log in as user without permission “manage patron lists”. Perform same patron search – “library” column is visible and can be toggled. 


- written by my dear colleague Claire, thanks :-)
Comment 1 Grace 2018-01-16 21:11:02 UTC
Created attachment 70573 [details]
User-with-permissions

This is what it looks like when a user has all permissions
Comment 2 Grace 2018-01-16 21:12:17 UTC
Created attachment 70574 [details]
User-without-permission

This is what it looks like for a user without the permission - “manage patron lists”
Comment 3 Grace 2018-01-16 21:44:18 UTC
Hi Christian,
I tried to reproduce the bug, I had one user that was the super librarian and one that was a user without the permission to manage patron lists and I can't seem to see the bug and the problems the bug produces.
Thanks :)

P.S please ignore the previous screen shots I sent they were wrong
Comment 4 Christian Stelzenmüller 2018-02-07 15:43:12 UTC
Hi Grace,

the display was broken library column (not the search), under stated conditions. But now it's okay in 16.11 it seems, we just checked.

Thanks for looking :-)