https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30623

David Cook <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #12 from David Cook <[email protected]> ---
I'm not sure I'm a fan in terms of the UX but I don't see an issue from the
security side. 

At a glance, it seems to only be copying the permission flags, so there is no
data tying the permission flags to a particular user. 

The actual update is done server-side anyway, so it wouldn't be bypassing any
authorization/validation steps.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to