https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42625

Andrew Fuerste-Henry <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Passed QA                   |Failed QA

--- Comment #165 from Andrew Fuerste-Henry <[email protected]> ---
Backing up and failing QA here after poking at permissions some more and
confirming some behavior on current main.

Before this code:
A user without Edit Locked Records permission importing a biblio with embedded
item info:
1 - can overlay a locked bib and change values
2 - can add items to a locked bib

A user without Edit Locked Records permission performing a batch record
modification:
3 - can edit a locked bib and change MARC values
4 - can add items to a locked bib by adding 952 fields

With these patches, all four of those actions are blocked for a user without
Edit Locked Records permission.

I would argue that actions 1 & 3 should not be allowed, but actions 2 & 4
should be. Action 2 and 4 are changes to the items rather than to the biblio
and that same user would be able to add/edit items via normal cataloging routes
(assuming they have item edit permissions).

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to