https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37849
Bug ID: 37849
Summary: Permissions for additional content - HTML
Customizations, Pages, News, OPAC, etc
Change sponsored?: ---
Product: Koha
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: Tools
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
We need more granular permissions to control who is allowed to create and edit
additional content now that so many options to edit both the staff interface
and the OPAC continue to be moved out of systems preferences. The only
permission is edit_additional_content and it's all or nothing. It's one thing
to allow a branch manager to add some news to the staff interface for their
branch. It's another thing entirely to allow them to create and edit
information that will display everywhere, or damage (intentionally or not)
pages and content created by others.
I suggest there be 2 new permissions that allow editing News items in the staff
interface. One permission would be to edit their own library's News e.g.
edit_own_news and the other to edit all News items e.g. edit_any_news.
Creating or editing any other type of additional content would be reserved for
those with the edit_additional_content permission.
Bug 35693 Granular Permissions to Everything also mentions this issue, but
appears to be intended to encourage developers to remember to address
permissions issues when rolling out enhancements and new features.
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
