Bug 41130 - Hold policy overrides do not require a user permission
Summary: Hold policy overrides do not require a user permission
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Hold requests (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-10-29 12:55 UTC by Andrew Fuerste-Henry
Modified: 2025-10-30 13:12 UTC (History)
4 users (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Crowdfunding goal: 0
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andrew Fuerste-Henry 2025-10-29 12:55:24 UTC
One of the issues with the AllowHoldPolicyOverride system preference is that it does not have a corresponding user permission, so once the system preference is enabled any user who can place a hold can override hold policies.

By comparison, the various overrides related to checkouts require a system preference to be enabled and for the user to have the force_checkout permission.