Bug 22370: Prevent OPAC users from seeing staff news from URL
authorAleisha Amohia <aleishaamohia@hotmail.com>
Tue, 19 Feb 2019 21:00:31 +0000 (21:00 +0000)
committerroot <root@f1ebe1bec408>
Mon, 4 Mar 2019 18:19:58 +0000 (18:19 +0000)
commit9f8187257a45b502a2b53ec1768177e7883dda35
tree2110363f0bc5ce0cf0bb2659dd8892518fdecc4f
parentf355788b340b19912891fd41c3168bac9c951aff
Bug 22370: Prevent OPAC users from seeing staff news from URL

To test:
1) Have some OPAC and staff only news items
2) On the OPAC view a single news item
3) Change the ID in the URL to the ID of a staff news item
4) Notice you can view the news item without any problems
5) Apply the patch and refresh the page
6) An error should show that the news item doesn't exist
7) Confirm you can still view OPAC news items individually

Sponsored-by: Catalyst IT
Signed-off-by: Josef Moravec <josef.moravec@gmail.com>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
opac/opac-main.pl