https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28957

--- Comment #6 from David Cook <[email protected]> ---
(In reply to Martin Renvoize (ashimema) from comment #0)
> Some plugins with hooks into the UI outside of the tools and plugin
> management page require the overall 'plugins' permission to run.
> 
> This however has the side effect of allowing users with those permissions to
> also manage plugins which may not be the effect wanted.
> 
> Example: A site has both an Online Payments plugin and the CLA Permissions
> Check plugin installed.  To use the button from the catalogueing toolbar for
> the CLA plugin you are required to have the overall plugins permission. This
> then exposes the login credentials for the Online payments plugin as the
> user gets access to the tools pages.

Ah right so "configure" needs to be separate from "run" for sure. But I think
"report", "tool", and "admin" might all be synonymous with "run"? 

Although I'm guessing that people have used them to limit people to plugins in
particular areas of Koha...

Tricky.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to