Bug 37228 - API endpoint to set password for patron requires full borrowers permission, but should only require 'edit_borrowers'
Summary: API endpoint to set password for patron requires full borrowers permission, b...
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: REST API (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Bugs List
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-07-01 18:04 UTC by Emily Lamancusa (emlam)
Modified: 2024-07-01 18:04 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Emily Lamancusa (emlam) 2024-07-01 18:04:39 UTC 
On the staff side, a user with only edit_borrowers permission can change the password on a patron account. That should be sufficient for changing the password via API as well.