https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38297

Matt Blenkinsop <matt.blenkin...@ptfs-europe.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #173710|0                           |1
        is obsolete|                            |

--- Comment #2 from Matt Blenkinsop <matt.blenkin...@ptfs-europe.com> ---
Created attachment 173711
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=173711&action=edit
Bug 38297: Add a permissions check to the New vendor button

Test plan:
1) Choose a staff patron and make sure they have permissions to log into the
staff interface
2) Ensure that the patron does not have the vendors_manage permission but give
them one other acquisitions permission so that they can see the link on the
homepage (e.g. budget_manage)
3) In an incognito browser, log in with that patron and go to the acquisitions
homepage
4) The New vendor button will be visible
5) Click on it and fill in the required fields. Submit the form and it will
error for lack of permissions
6) Apply patch
7) Return to the acquisitions page and the New vendor button should no longer
be visible
8) Back in your main browser, give the patron the vendors_manage permission and
then refresh the incognito window - the button should be visible

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to