Bug 38540 - Checkout override allowed without permissions when item has parts / materials specified
Summary: Checkout override allowed without permissions when item has parts / materials...
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Circulation (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-11-26 21:28 UTC by Andrew Fuerste-Henry
Modified: 2024-12-23 16:12 UTC (History)
3 users (show)

See Also:
GIT URL:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andrew Fuerste-Henry 2024-11-26 21:28:14 UTC
Koha will allow a user who does not have force_checkout permissions to check out to a user with fines over the NoIssuesCharge amount if the item to be checked out has a value in items.materials has content.

To confirm:
1- set AllowFineOverride to Allow, confirm there is a value in NoIssuesCharge
2- have a user with circulate_remaining_permissions but not force_checkout
3- have a patron with fines over the NoIssuesCharge amount
4- have two items: Item A does not have a value in items.materials, Item B does
5- log in as your user, find your patron
6- attempt to check Item A out to your patron, Koha tells you "Cannot check out" and "Patron has a debt"
7- attempt to check out Item B, Koha says "Please confirm checkout," tells you about the debt and the materials note

This happens whether or not CircConfirmItemParts is on.
Comment 1 Lucas Gass (lukeg) 2024-12-12 22:52:08 UTC
This seems to be true for some other conditions as well. For example, in the same setup that Andrew describes:



1. have two items: Item A does not have a value in items.materials, Item B does
2. Have both items checked out to a different patron 
3. Try checking out Item A, Koha tells you cannot: 

Cannot check out

    Item The Arden edition of the works of William Shakespeare. (39999000005998) is checked out to Ronnie Ballard (23529000139858).


4. Try to checkout Item B, Koha says "Please confirm checkout", tells you about the checkout to another patron and the materials note.
Comment 2 Lucas Gass (lukeg) 2024-12-12 23:21:28 UTC
I started looking here and ran into something else:

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38695
Comment 3 Lucas Gass (lukeg) 2024-12-23 16:12:23 UTC
(In reply to Lucas Gass (lukeg) from comment #2)
> I started looking here and ran into something else:
> 
> https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38695

Ignore this comment, I am unable to recreate that issue.