Angular Holdings Editor : Update item regardless of working location and profile
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Evergreen |
Confirmed
|
High
|
Andrea Neiman |
Bug Description
Evergreen 3.9.1 (primary testing)
Evergreen MOBIUS server (confirm circulator/
Evergreen 3.10.1 (Jabok server)
Tested and found that circ1, localadmin, and cat2 profile holders are able to edit items outside of their working location. I am assuming it is due to the UPDATE_COPY permission.
It does bring up a Change Operator request if you attempt to change anything other than the circulation/owning locations. For example, as a Cat2 I attempted to change a stat cat for an item owned by a different library. When I clicked Apply All, Save & Exit, I received a "Change Operator" login. When I went back in and changed the circulation/owning libraries, it saved and closed without the credentials request.
Here's testing log for MOBIUS server:
1. Logged in as br1jmcginnis under RPLS-WEPL-
2. Searched for "concerto" in the staff catalog
3. Selected Le concerto (TCN 2)
4. Went to Holdings View and selected an item owned by SPLS-BPL (CONC71000337)
5. Right-clicked and selected Edit Items
6. Changed the circulating and owning library attributes. Apply All, Save & Exit closed the Holdings Editor and the item was transferred to RPLS_WEPL.
___
Related Bugs: https:/
https:/
tags: | added: cat-holdingseditor cataloging permissions |
Changed in evergreen: | |
assignee: | nobody → Ruth Frasur (rfrasur) |
Marking Confirmed.
I tested this on a 3.9.4 system as well as 3.11.
Following Britta's steps, as a user with UPDATE_COPY at the system level, I was able to open an item outside of my system in the Angular holdings editor, change the owning and circulating library fields to my own working location, and successfully save the item.