https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43030
Arthur Suzuki <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #13 from Arthur Suzuki <[email protected]> --- Hi Martin, that is interesting and would allow a client software to use the patron's credential only, only stored for the length of a session. Much better than a "portal" account with elevated privileges and credential stored in a configuration, to talk to Koha. That would improve security from my point of view. Wondering, would that allow a patron without any staff privilege (plain borrower) to access the API and change its data? What about access to its own holds and checkouts through the /patrons/{id}/checkouts and /holds , is that covered by your patch set? That's promising anyway. -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list -- [email protected] To unsubscribe send an email to [email protected] website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
