Staff without COPY_STATUS_LOST.override permission can check in lost books

Bug #1847552 reported by Jane Sandberg
This bug affects 1 person
Affects Status Importance Assigned to Milestone

Bug Description

In the 3.4 release candidate (Web client):

1) Go to Server Administration > Permission Groups
2) Take the COPY_STATUS_LOST.override permission away from Circulators (or some other group with permissions to check in items)
3) Look for a staff user in that permission group. Make sure they don't have the COPY_STATUS_LOST.override permission.
4) Log in as that staff member.
5) Check in an item with status "lost".
6) Note that you get an alert, but can continue checking in the item.

Our goal is to take away the ability to check in lost items from a certain permission group, since our lost process is complex and requires specific staff members to take very specific actions.

tags: added: admin-pages
removed: webstaffclient
tags: removed: admin-pages
tags: added: circ-checkin
removed: checkin
Revision history for this message
Susan Morrison (smorrison425) wrote :

This is still the case in 3.10. The permission for needed for checking in an item that was marked lost is COPY_ALERT_MESSAGE.override, which is the same permission needed for checking in any item that has an alert attached to it. I don't know if that's the desired behavior, or if it should be similar to the process of checking in a claims returned item, which requires both COPY_ALERT_MESSAGE.override and CIRC_CLAIMS_RETURNED.override.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.