It is possible to display and edit exhibitions/courses from other libraries and organisations

[pronguen]

Describe the bug

It is possible to

• display an exhibition/course (resource collection) from another organisation.
• edit an exhibition/course from another library of the same organisation.
• add an item from another library/organisation to a collection

To Reproduce

1. Open https://bib.test.rero.ch/professional/records/collections (without using the admin menu)
2. See that exhibitions from other organisations can be accessed

Expected behavior

It is only possible

• to display exhibitions/courses of his/her own organisation
• to edit exhibitions/courses of his/her own library
• to add items to a collection that are from the same library

Context

• server: ils.test.rero.ch
• version: v1.8.0

[github-actions[bot]]

This issue is stale because it has been open 6 months with no activity.

[PascalRepond]

This should be added to the permissions US https://github.com/rero/rero-ils/issues/2779

[pronguen]

This should be added to the permissions US #2779

I did it on request of the scrum master 😉 I still think we should keep this issue open to not forget it.