https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37973
Bug ID: 37973
Summary: Users can easily circumvent the restricted item
subfields
Change sponsored?: ---
Product: Koha
Version: Main
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P5 - low
Component: Cataloging
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
To recreate:
1. Add some 952 subfields to SubfieldsToAllowForRestrictedEditing
2. Find or create a user with edit_items and edit_items_restricted permissions.
3. Log in as that user and edit an item.
4. Find one of the restricted fields and remove the readonly attribute via the
browsers devtools.
5. Edit the field and save.
We should block the editing of restricted subfields at a higher level. Maybe
throw and exception?
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
