Jonathan Druart
ae53caa681
Bug 11911 replaced the permission of suggestions.pl (create a purchase suggestion) from catalogue => 1 to acquisition => 'suggestions_manage'. However we have a lot of acquisition scripts that have lax permissions (acquisition => '*' which means any sub permissions of acquisition is enough). That causes problem when a circulation staff can create purchase suggestions but not access acquisition information. One solution is to move the suggestions_manage subpermission out of the acquisition permission and create a new suggestion permission. Test plan: 0. Setup * Create a patron with several permission (and full acquisition permission) * Create another patron with several permission, and suggestions_manage permission * Create another patron without the suggestions_manage permission 1. Apply the patch and execute the update database entry 2. Note that the third patron you create still does not have suggestions_manage 3. Confirm that you can create a purchase suggestion if you have suggestions_manage, but cannot access acquisition pages if you do not have any subpermissions of the acquisition permission Signed-off-by: Hayley Mapley <hayleymapley@catalyst.net.nz> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
26 lines
1.4 KiB
SQL
26 lines
1.4 KiB
SQL
INSERT INTO userflags (bit, flag, flagdesc, defaulton) VALUES
|
|
(0,'superlibrarian','Access to all librarian functions',0),
|
|
(1,'circulate','Check out and check in items',0),
|
|
(2,'catalogue','<b>Required for staff login.</b> Staff access, allows viewing of catalogue in staff client.',0),
|
|
(3,'parameters','Manage Koha system settings (Administration panel)',0),
|
|
(4,'borrowers','Add or modify patrons',0),
|
|
(5,'permissions','Set user permissions',0),
|
|
(6,'reserveforothers','Place and modify holds for patrons',0),
|
|
(9,'editcatalogue','Edit catalog (Modify bibliographic/holdings data)',0),
|
|
(10,'updatecharges','Manage patrons fines and fees',0),
|
|
(11,'acquisition','Acquisition management',0),
|
|
(12,'suggestions','Suggestion management',0),
|
|
(13,'tools','Use all tools (expand for granular tools permissions)',0),
|
|
(14,'editauthorities','Edit authorities',0),
|
|
(15,'serials','Manage serial subscriptions',0),
|
|
(16,'reports','Allow access to the reports module',0),
|
|
(17,'staffaccess','Allow staff members to modify permissions and passwords for other staff members',0),
|
|
(18,'coursereserves','Course reserves',0),
|
|
(19, 'plugins', 'Koha plugins', '0'),
|
|
(20, 'lists', 'Lists', 0),
|
|
(21, 'clubs', 'Patron clubs', '0'),
|
|
(22,'ill','The Interlibrary Loans Module',0),
|
|
(23,'self_check','Self check modules',0),
|
|
(24, 'stockrotation', 'Manage stockrotation operations', 0),
|
|
(25, 'cash_management', 'Cash management', 0)
|
|
;
|