4376e369b2
Merging patrons only required edit_borrowers permission
but would result in a patron deletion.
This patch requires a new merge_borrowers subpermission
To test:
1. Give a patron the following permissions
catalogue, edit_borrowers, list_borrowers
2. Log into the staff interface as the patron
3. Do a patron search and select 2 patrons
4. Click merge patron - success - a patron got deleted
5. Apply patch, updatedatabase and restart_all
6. Repeat steps 3 and 4 - you can't
7. Add the new permission for merge_borrowers
8. Repeat steps 3 and 4 - now you can
9. prove t/Koha/Auth/Patrons.t
Sponsored-by: CLAMS
Signed-off-by: Owen Leonard <oleonard@myacpl.org>
Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| Auth | ||
| Authority | ||
| Database | ||
| DateTime/Format | ||
| I18N/po/xx_XX/LC_MESSAGES | ||
| Installer | ||
| Middleware | ||
| Object | ||
| Plugins | ||
| REST/Plugin | ||
| Result | ||
| SearchEngine | ||
| Util | ||
| Config.t | ||
| Email.t | ||
| Exceptions.t | ||
| I18N.t | ||
| ItemType.t | ||
| Manual.t | ||
| Script.t | ||
| Script_cron.t | ||
| Z3950responder.t | ||
| sleep.pl | ||
| wait.pl | ||