Koha-community/Koha
15
7
Fork 0
Code Issues Releases Wiki Activity

Bug 33595: (bug 26628 follow-up) Fix authorization for tools-home.pl

Browse source 
If you log into the OPAC as a user with no flags, you can see a restricted view of
/cgi-bin/koha/tools/tools-home.pl instead of seeing the login screen.

Test plan:
Use a patron with catalogue permission only
Login and access the tools home page
=> redirected to the login screen

Add a club sub permission
Login and access the tools home page
=> You see the tools home page with the clubs link

Add a tool sub permission, remove club
Login and access the tools home page
=> You see the tools home page with the relevant link

Signed-off-by: David Cook <dcook@prosentient.com.au>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
This commit is contained in:
Jonathan Druart 2023-05-11 12:05:04 +02:00
parent 8eeaa1f714
commit 45d99e7a0b
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
tools/tools-home.pl
View file

@ -29,7 +29,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "tools/tools-home.tt",
query => $query,
type => "intranet",
flagsrequired => [ tools => '*', clubs => '*' ],
flagsrequired => [ { tools => '*' }, { clubs => '*' } ],
}
);