https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22724
Nick Clemens <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] QA Contact|[email protected] |[email protected] |y.org | Status|Passed QA |Failed QA --- Comment #11 from Nick Clemens <[email protected]> --- Hi Hayley, We need a server side check here for the permissions. With these patches I can inspect the element, add the write-off button to submit, and write off the charge This is probably true for payments as well. This will prevent 90% of the cases, but we should probably strictly enforce. You can git grep for haspermission to see some examples -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
