https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30557

--- Comment #210 from Olivia Reynolds <[email protected]> ---
Created attachment 208788
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=208788&action=edit
Bug 30557: (follow-up) Protect non-public and ownerless item lists

When the owner of an item list is deleted, its owner is set to NULL.
Previously this would fail-open and allow everyone access. Now this is
only true if the list is public.

Test plan:
1.  Apply patch.
2.  Set up a test librarian with item list permissions.
3.  As this librarian, create two item lists: one public and one
    private.
4.  As another librarian, verify you can only see the public item list.
5.  Delete the test librarian.
6.  Verify you can still only see the public item list.
7.  Prove t/db_dependent/Koha/Item/List.t, and verify all the tests
    pass.

Sponsored-by: CLAMS

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to