https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22724

--- Comment #14 from Nick Clemens <n...@bywatersolutions.com> ---
(In reply to Hayley Mapley from comment #13)
> The second patch that I added enforced removal of the submit button if the
> staff user managed to find a way to get to paycollect.tt to confirm the
> payment/writeoff (either through constructing a url or adding the button
> somehow). If the user doesn't have the permissions, the button will not be
> there. Is this button you talked about adding manually to the page?
> 
> If this isn't your concern, I will look into the server side check you
> mentioned
> 
> Thanks for looking at it!

Yup, that was the button I edited back in. I looked again today, we don't need
haspermission, we just need to make sure the page requires the writeoff
permission whenever it is a write off.  Attaching a patch for testing

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to