https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30623

David Cook <dc...@prosentient.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dc...@prosentient.com.au

--- Comment #12 from David Cook <dc...@prosentient.com.au> ---
I'm not sure I'm a fan in terms of the UX but I don't see an issue from the
security side. 

At a glance, it seems to only be copying the permission flags, so there is no
data tying the permission flags to a particular user. 

The actual update is done server-side anyway, so it wouldn't be bypassing any
authorization/validation steps.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to