[OPEN-ILS-GENERAL] Permission Problems

[Ben Shum]

Aha, that sounds correct.

Have you checked to make sure that you've granted working locations for
the network staff accounts for the workstations they're logging in from?

-- Ben

On 03/21/2011 11:05 AM, Tim Spindler wrote:
> Thanks Ben, I'm confused then because I have 
>>
>>     * group_application.user
>>     * group_application.user.patron
>>
> At the STAFF level and I assumed that it would cascade down for the
> groups underneath staff (ACADEMIC, PUBLIC, and NETWORK).  I don't have
> anything additional on the public staff and they are able to register
> patrons without the org unit problem.
>
> Tim
>
> On Mon, Mar 21, 2011 at 10:58 AM, Ben Shum <bshum at biblio.org
> <mailto:bshum at biblio.org>> wrote:
>
>     Hi Tim,
>
>     Looking at the permissions, I think you have to add one for the
>     network staff for general all users:  group_application.user
>
>     If they don't have that, they won't be able to create any user
>     who's a child of the primary users group (i.e. every other group).
>
>     Probably also need to have group_application.user.patron (since I
>     see you have at least one of those) and any other parent group
>     above them.
>
>     -- Ben
>
>
>     On 03/21/2011 10:53 AM, Tim Spindler wrote:
>>     I'm not sure if this is a bug or the way I have something set up
>>     but I'm looking for Advice.  I have a situation where public
>>     library staff can register patrons and the local admin can set up
>>     accounts for their library fine. Howver, none of the network
>>     staff can create user accounts because the org unit drop down
>>     will not populate the org units.  However, when logged in as a
>>     public library staff member it all works fine.   But network
>>     staff can't do anything.  We are on a test install of v.2.03.
>>      First we have the following permission group
>>
>>         * Users
>>               o Patrons
>>               o Staff
>>                     + Academics
>>                     + Network
>>                           # Network Administrator (has "Everything"
>>                             permission and still cannot register a
>>                             patron due to the org unit drop down)
>>                           # Technical Services Staff
>>                           # Support staff
>>                     + Publics
>>
>>     The following are the specific permissions for each permission group
>>
>>     Staff
>>
>>         * CHECKIN_BYPASS_HOLD_FULFILL
>>         * COPY_CHECKOUT 
>>         * COPY_HOLDS 
>>         * COPY_TRANSIT_RECEIVE
>>         * CREATE_BILL
>>         * CREATE_CONTAINER 
>>         * CREATE_CONTAINER_ITEM
>>         * CREATE_COPY_NOTE
>>         * CREATE_COPY_TRANSIT
>>         * CREATE_HOLD_NOTIFICATION
>>         * CREATE_IN_HOUSE_USE
>>         * CREATE_NON_CAT_TYPE
>>         * CREATE_PAYMENT
>>         * CREATE_TRANSACTION
>>         * CREATE_TRANSIT
>>         * CREATE_USER
>>         * CREATE_VOLUME_NOTE
>>         * DELETE_CONTAINER
>>         * DELETE_USER
>>         * OFFLINE_UPLOAD
>>         * OFFLINE_VIEW
>>         * RENEW_CIRC
>>         * RENEW_HOLD_OVERRIDE
>>         * REQUEST_HOLDS
>>         * SET_CIRC_CLAIMS_RETURNED
>>         * SET_CIRC_LOST
>>         * SET_CIRC_MISSING
>>         * STAFF_LOGIN
>>         * UPDATE_BATCH_COPY
>>         * UPDATE_CONTAINER
>>         * UPDATE_NON_CAT_TYPE
>>         * UPDATE_ORG_SETTING
>>         * UPDATE_ORG_UNIT
>>         * UPDATE_USER
>>         * VIEW_BILLING_TYPE
>>         * VIEW_CIRCULATIONS
>>         * VIEW_CONTAINER
>>         * VIEW_COPY_CHECKOUT_HISTORY
>>         * VIEW_COPY_NOTES
>>         * VIEW_HOLD
>>         * VIEW_HOLD_NOTIFICATION
>>         * VIEW_HOLD_PERMIT
>>         * VIEW_ORG_SETTINGS
>>         * VIEW_PERMISSION
>>         * VIEW_PERMIT_CHECKOUT
>>         * VIEW_PERM_GROUPS
>>         * VIEW_TITLE_NOTES
>>         * VIEW_TRANSACTION
>>         * VIEW_USER
>>         * VIEW_USER_FINES_SUMMARY
>>         * VIEW_USER_TRANSACTIONS
>>         * VIEW_VOLUME_NOTES
>>         * VOLUME_HOLDS
>>         * group_application.user
>>         * group_application.user.patron
>>         * group_application.user.patron.publics
>>
>>     Public
>>
>>     No additional permissions at this level
>>
>>     Academic
>>
>>         * group_application.user.patron.academics
>>
>>     Network
>>
>>        *
>>
>>
>>         * group_application.user.patron.academics
>>         * group_application.user.staff
>>         * group_application.user.staff.academic
>>         * group_application.user.staff.admin.lib_manager
>>         * group_application.user.staff.admin.local_admin
>>         * group_application.user.staff.admin.mini
>>         * group_application.user.staff.ola
>>         * group_application.user.staff.public
>>
>>
>>     -- 
>>
>>     ____________________________
>>
>>     Tim Spindler
>>
>>     Manager of Library Applications
>>
>>     tspindler at cwmars.org <mailto:tspindler at cwmars.org>
>>
>>     C/W MARS, Inc.
>>
>>     http://www.cwmars.org
>>
>
>     -- 
>     Benjamin Shum
>     Open Source Software Coordinator
>     Bibliomation, Inc.
>     32 Crest Road
>     Middlebury, CT 06762
>     203-577-4070 <tel:203-577-4070>, ext. 113
>
>
>
>
> -- 
> __________________________
> Tim Spindler
> tjspindler at gmail.com <mailto:tjspindler at gmail.com>

-- 
Benjamin Shum
Open Source Software Coordinator
Bibliomation, Inc.
32 Crest Road
Middlebury, CT 06762
203-577-4070, ext. 113

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://libmail.georgialibraries.org/pipermail/open-ils-general/attachments/20110321/83cc0064/attachment.htm