https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38040
Bug ID: 38040
Summary: IndependentBranches doesn't prevent editing other
libraries' holds
Change sponsored?: ---
Product: Koha
Version: Main
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: Hold requests
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
When IndependentBranches is set, any staff member from any library can see and
edit the holds from patrons from other libraries.
1. Set IndependentBranches, IndependentBranchesPatronModifications, and
IndependentBranchesTransfers to 'Yes'
2. Set canreservefromotherbranches to "Don't allow (with independent branches)"
3. Give limited permissions to a staff patron
- circulate
- catalogue
- delete_borrowers
- edit_borrowers
- list_borrowers
- send_messages_to_borrowers
- reserveforothers
- updatecharges
4. As the superlibrarian, place several holds on a record with items from
various branches
5. Log in as the restricted staff
6. View the holds for the record
--> Some will say "A patron from library XX" instead of the name -- OK
7. Click the trash bin icon to cancel a hold from another library
--> Hold is cancelled -- NOT OK
I feel like it should only be superlibrarians who can edit all holds, even
those from other libraries.
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
