https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38414
--- Comment #48 from Emmi Takkinen <[email protected]> --- (In reply to David Cook from comment #46) > (In reply to Emmi Takkinen from comment #45) > > This isn't working as intented in version 25.05.11. Most of the Javascript > > code from first patch is missing and buttons are still shown when patron > > doesn't have create_reports or delete_reports permissions. Link to commit in > > GitHub > > https://github.com/Koha-Community/Koha/commit/ > > b02e6c780b83b8c7f7cb89087920a8bd7a09c016. > > That is interesting. I'd say the controller change is the key one though. > Are you able to perform unauthorized actions? > > Or is it just the buttons presentation isn't as expected? All buttons are still displayed on pop-up. I was able to delete a report with just execute_reports permission. Edit, Duplicate and Schedule buttons lead to "Error: You do not have permission to access this page.". -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
