5ce9d5af4e
Merging patrons only required edit_borrowers permission
but would result in a patron deletion.
This patch requires a new merge_borrowers subpermission
To test:
1. Give a patron the following permissions
catalogue, edit_borrowers, list_borrowers
2. Log into the staff interface as the patron
3. Do a patron search and select 2 patrons
4. Click merge patron - success - a patron got deleted
5. Apply patch, updatedatabase and restart_all
6. Repeat steps 3 and 4 - you can't
7. Add the new permission for merge_borrowers
8. Repeat steps 3 and 4 - now you can
9. prove t/Koha/Auth/Patrons.t
Sponsored-by: CLAMS
Signed-off-by: Owen Leonard <oleonard@myacpl.org>
Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
|
||
|---|---|---|
| .. | ||
| audio_alerts.sql | ||
| auth_val_cat.sql | ||
| keyboard_shortcuts.sql | ||
| message_transport_types.sql | ||
| sample_notices_message_attributes.sql | ||
| sample_notices_message_transports.sql | ||
| subtag_registry.sql | ||
| sysprefs.sql | ||
| userflags.sql | ||
| userpermissions.sql | ||