https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41845

--- Comment #2 from Caroline Cyr La Rose <[email protected]> ---
(In reply to David Cook from comment #1)
> Going forward, I do think we need both "allow" and "deny" (or "restrict")
> permissions, but they need to be separated in a way the effective of the
> permission clear.

I think what bugs me most is that when I check the main "Cataloging" permission
(editcatalogue), it also checks the restrictive permission
(edit_items_restricted) which means that you think the person has all
permissions in cataloging, but in fact they don't. 

I'm not sure how the revamp will affect the UI, but I think that if continue to
have restrictive permissions, if you check the "main" permission of a group, it
should NOT include the restrictive permissions (i.e. checking editcatalogue
should check everything in that section EXCEPT edit_items_restricted)

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to