expand context org for SET_CIRC_LOST permission

Bug #1259636 reported by Jason Etheridge
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Evergreen
Confirmed
Undecided
Unassigned

Bug Description

Consider this scenario:

In a stock-like org hierarchy, staff in a consortium have the SET_CIRC_LOST permission granted at a depth of Branch.

Patron A checkouts out Item A (belonging to Library A) at Library A.

Sometime later, the circulation gets renewed at Library B.

Sometime later, Patron A loses Item A.

Library A does not have permission to mark the circulation as Lost, even though it is their item, based on the transaction library being Library B.

We could have the permission check consider multiple libraries against the depth:
the item circ lib, the item owning lib, and the circ transaction lib

Currently we're just using the latter. We may want to use all three.

Revision history for this message
Michele Morgan (mmorgan) wrote :

Adding a link to related bug 1632797.

tags: added: permissions
Revision history for this message
Michele Morgan (mmorgan) wrote :

Just adding a note that in our consortium, we have set the depth of SET_CIRC_LOST to Consortium level for circulation staff, so they have permission to mark any checked out item Lost.

Changed in evergreen:
status: New → Confirmed
tags: added: circ-billing
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.