https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26183

            Bug ID: 26183
           Summary: UpdateItemWhenLostFromHoldList should be limited in
                    scope
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P5 - low
         Component: Staff Client
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
                CC: [email protected]

UpdateItemWhenLostFromHoldList lets one update any value in the items table
when cancelling a hold from the Holds to Pull list. That includes things that
aren't normally editable. For instance, one can use it to change itemnumbers.
It doesn't seem likely anyone will set it up to do so, but the potential damage
is pretty severe.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to