http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7673
--- Comment #36 from Magnus Enger <[email protected]> --- I applied the patch, then tried creating a librarian *without* the editcatalogue.delete_all_items permission. But this patron was still able to delete all items from a record. As far as I can see, the actual implementation of the permission is missing from the most reet versin of the patches. Specifically this part seems to be missing: [% IF ( CAN_user_editcatalogue_delete_all_items ) %]{ text: _("Delete all items"), onclick: {fn: confirm_items_deletion }[% UNLESS ( count ) %],id:'disabled'[% END %] }[% END %] See this for context: http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=9857&action=diff#a/koha-tmpl/intranet-tmpl/prog/en/includes/cat-toolbar.inc_sec1 -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
