Koha-community/Koha
15
7
Fork 0
Code Issues Releases Wiki Activity

Bug 6643 -- Able to download patron card batches as an unauthorized user

Browse source 
Making sure permissions are checked on label creator

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
This commit is contained in:
Liz Rea 2011-07-28 15:59:15 -05:00 committed by Chris Cormack
parent 7ad49e0cae
commit 09da79616e
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
patroncards/create-pdf.pl
View file

@ -21,6 +21,7 @@ use strict;
use warnings;
use CGI;
use C4::Auth;
use Graphics::Magick;
use XML::Simple;
use POSIX qw(ceil);
@ -34,6 +35,16 @@ use C4::Patroncards 1.000000;
my $cgi = new CGI;
my ( $template, $loggedinuser, $cookie ) = get_template_and_user({
template_name => "labels/label-home.tt",
query => $cgi,
type => "intranet",
authnotrequired => 0,
flagsrequired => { tools => 'label_creator' },
debug => 1,
});
my $batch_id = $cgi->param('batch_id') if $cgi->param('batch_id');
my $template_id = $cgi->param('template_id') || undef;
my $layout_id = $cgi->param('layout_id') || undef;