Staff without COPY_STATUS_LOST.override permission can check in lost books

[Jane Sandberg]

In the 3.4 release candidate (Web client):

1) Go to Server Administration > Permission Groups
2) Take the COPY_STATUS_LOST.override permission away from Circulators (or some other group with permissions to check in items)
3) Look for a staff user in that permission group. Make sure they don't have the COPY_STATUS_LOST.override permission.
4) Log in as that staff member.
5) Check in an item with status "lost".
6) Note that you get an alert, but can continue checking in the item.

Our goal is to take away the ability to check in lost items from a certain permission group, since our lost process is complex and requires specific staff members to take very specific actions.

[Susan Morrison (smorrison425)]

This is still the case in 3.10. The permission for needed for checking in an item that was marked lost is COPY_ALERT_MESSAGE.override, which is the same permission needed for checking in any item that has an alert attached to it. I don't know if that's the desired behavior, or if it should be similar to the process of checking in a claims returned item, which requires both COPY_ALERT_MESSAGE.override and CIRC_CLAIMS_RETURNED.override.