https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28843
Barbara Johnson <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |In Discussion --- Comment #3 from Barbara Johnson <[email protected]> --- I originally signed off on this bug, but had some concerns so I revisited it and changed the status to In Discussion. 1. A staff member who does not have edit permissions still sees the edit button. Clicking on the edit button takes them to a Koha login screen. It would be better if the staff member did not see the edit button at all if they can't edit anything. 2. When a staff member that does not have bib editing permissions clicks on the View button from manage-marc-import.pl they are taken to a view only display on detail.pl which seems correct. However, clicking on the Edit dropdown on this screen gives them the ability to edit the record using a MARC mod template even though they do not have the permission for editing these templates. A staff member with view only permissions should not be able to edit the bib record at all. 3. In discussing this issue with an expert cataloger she had the following to say: "I can't think of a single reason why I'd allow someone to load files without any editing permissions, frankly--looking at a loaded file is a quality control step, and if someone doesn't have the expertise to edit MARC (bib or aut), how are they going to have the expertise to, e.g., troubleshoot something that should have overlaid but didn't?" Based on this comment it seems she would question whether a view option is even needed. -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
