Evergreen

Carousel permissions should not be global

Bug #1863386 reported by Galen Charlton
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Evergreen
Fix Released
Medium
Unassigned
Evergreen 3.4.3

Bug Description

The ADMIN_CAROUSEL permission is currently granted with pcrud global_required when it should be restricted to the container.carousel.owner org unit. Changing this will allow local admins at consortia to see and manage just their own carousels.

Evergreen 3.4+

Revision history for this message
Galen Charlton (gmc) wrote :

A patch is available in working/user/gmcharlt/lp1863386_carousel_perm_fix / https://git.evergreen-ils.org/?p=working/Evergreen.git;a=shortlog;h=refs/heads/user/gmcharlt/lp1863386_carousel_perm_fix

Changed in evergreen:
milestone: none → 3.4.3
importance: Undecided → Medium
tags: added: carousel pullrequest
Terran McCanna (tmccanna)
Changed in evergreen:
status: New → Confirmed
Revision history for this message
Jennifer Weston (jweston) wrote :

I have tested this code and consent to signing off on it with my name, Jennifer Weston, and my email address, <email address hidden>.

tags: added: signedoff
Revision history for this message
Mike Rylander (mrylander) wrote :

Thanks, Galen and Jennifer!

Picked to master and 3.4.

Changed in evergreen:
status: Confirmed → Fix Committed
Evergreen Bug Maintenance (bugmaster)
Changed in evergreen:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.