https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35905

Brendan Lawlor <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #170634|0                           |1
        is obsolete|                            |
 Attachment #170635|0                           |1
        is obsolete|                            |
 Attachment #170636|0                           |1
        is obsolete|                            |

--- Comment #11 from Brendan Lawlor <[email protected]> ---
Created attachment 171105
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=171105&action=edit
Bug 35905: Add permission checks to report results

There are some links on the report results page that the user may not have
access to

This patch adds permission checks to the report results page to:
1. Disable the batch operations button or remove its dropdown items
2. Remove automatic links from the
    itemnumber, biblionumber, borrowernumber, and cardnumber columns
3. Remove the 'Hide/Show data menus' button
When the user doen't have permission to those actions

To test:
1. Create the following two reports
    a) select borrowernumber, cardnumber from borrowers limit 100
    b) select itemnumber, biblionumber from items limit 100
2. Create a user with only catalogue and reports permissions
3. Run each report as the user with minimal permissions
3. Verify the batch operations button is disabled
4. Verify there is no link to edit, view or checkout patron in borrowernumber
columns
5. Verify there is no link to edit record in itemnumber and biblionumber
columns
6. Add the following permissions one at a time and re run the reports
    tools_items_batchmod
    tools_items_batchdel
    tools_records_batchmod
    tools_records_batchdel
    tools_edit_patrons
    editcatalogue_edit_catalogue
    editcatalogue_edit_items
    borrowers_edit_borrowers
7. Verify the batch operations button is enabled and displays the correct links
8. Verify the links in borrowernumber and cardnumber columns
    to view, edit and checkout patron are displayed correctly
9. Verify the links in itemnumber and biblionumber columns
    to edit record are displayed correctly

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to