https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42542

            Bug ID: 42542
           Summary: budget_add_del is incorrectly required to edit a
                    budget
   Initiative type: ---
        Sponsorship ---
            status:
           Product: Koha
           Version: Main
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Acquisitions
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]

Add and delete funds (but can't modify funds) (budget_add_del) is required to
load page
"http://your_ktd_instance:8081/cgi-bin/koha/admin/aqbudgets.pl?op=add_form&budget_id=1&budget_period_id=1";,
which is the link created while *modifying* a budget.

I'm not sure about the correct behaviour for a safe way to protect this page,
feel free to comment/amend the patch

STEPS TO REPRODUCE:
1 - As a superuser edit the rights of Henry Acevedo. Set followings: 

Staff access, allows viewing of catalogue in staff interface (catalogue)
Manage funds (budget_manage)
Modify funds (can't create lines, but can modify existing ones) (budget_modify)

2 - Visit
http://koha-ktd:8081/cgi-bin/koha/admin/aqbudgets.pl?budget_period_id=1 click
on Actions->Edit

3 - Nothing happens
4 - add permission budget_add_del and repeat 2

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to