https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38291

--- Comment #32 from Andrew Fuerste-Henry <[email protected]> ---
I'd argue that the permission to list library groups is equivalent to the
ability to list libraries. The API route to list libraries only requires basic
catalogue permission, matching what's used for listing library groups.

There is no page in the staff interface to simply view a list of all branches
if one does not have admin permissions, but numerous places need to provide the
user that list in the course of other functionality (editing patrons, items,
etc). There is not yet any place in the Koha UI where a user selects from a
list of library groups, but this route is used to create one. Bug 42625 allows
record sources to be tied to library groups and allow users from that group to
edit locked records from that source.

(Elsewhere we manage similar group-aware access restrictions by asking the user
to limit to a specific library and then allowing that to imply access to other
libraries based on groups -- see the reports limits by library group introduced
in Bug 42621. That avoids this question of making a list of groups visible to
the user, but is arguably less clear for the user.)

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to