Staff without COPY_STATUS_LOST.override permission can check in lost books

Bug #1847552 reported by Jane Sandberg
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Evergreen
New
Undecided
Unassigned

Bug Description

In the 3.4 release candidate (Web client):

1) Go to Server Administration > Permission Groups
2) Take the COPY_STATUS_LOST.override permission away from Circulators (or some other group with permissions to check in items)
3) Look for a staff user in that permission group. Make sure they don't have the COPY_STATUS_LOST.override permission.
4) Log in as that staff member.
5) Check in an item with status "lost".
6) Note that you get an alert, but can continue checking in the item.

Our goal is to take away the ability to check in lost items from a certain permission group, since our lost process is complex and requires specific staff members to take very specific actions.

tags: added: admin-pages
removed: webstaffclient
tags: removed: admin-pages
tags: added: circ-checkin
removed: checkin
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers