https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37685

            Bug ID: 37685
           Summary: Adding a new subpermission to a permission category
                    grants new features to all staff with a top level
                    permission
 Change sponsored?: ---
           Product: Koha
           Version: Main
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Staff interface
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
                CC: [email protected]

On bug 29393 there was a new subpermission added to the borrowers permission:
"send_messages_to_borrowers"

This meant that all staff who were previously able to add/update/delete patrons
could now also send them messages with any content. We have received complaints
from libraries who do not wish all staff to have had this new permission added.
Messaging and borrower CRUD are not necessarily related.

This points to a larger problem with our permissions, but I think in terms of
updates/upgrades it is worth having the conversation of how we should go about
adding new permissions/subpermissions and granting access to new features.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to