Browse Source

Bug 9605: rotating collections permissions are wrong

In tools / rotating collections, permissions are 'parameters => 1'.
But there is a dedicated permission : tools => rotating_collections.

Test plan :
- Disable tools/rotating_collections permission to your connected user
- Check you dont have access to those pages :
  rotating_collections/addItems.pl
  rotating_collections/editCollections.pl
  rotating_collections/rotatingCollections.pl
  rotating_collections/transferCollection.pl
- Enable tools/rotating_collections permission to your connected user
- Check you have access to above pages

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Fixes wrong permission on rotating collection related pages.
This will allow to block access to those.
Signed-off-by: Jared Camins-Esakov <jcamins@cpbibliography.com>
3.12.x
Fridolyn SOMERS 10 years ago
committed by Jared Camins-Esakov
parent
commit
76c3649db3
  1. 2
      rotating_collections/addItems.pl
  2. 2
      rotating_collections/editCollections.pl
  3. 2
      rotating_collections/rotatingCollections.pl
  4. 2
      rotating_collections/transferCollection.pl

2
rotating_collections/addItems.pl

@ -34,7 +34,7 @@ my ($template, $loggedinuser, $cookie)
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 1},
flagsrequired => { tools => 'rotating_collections' },
debug => 1,
});

2
rotating_collections/editCollections.pl

@ -33,7 +33,7 @@ my ($template, $loggedinuser, $cookie)
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 1},
flagsrequired => { tools => 'rotating_collections' },
debug => 1,
});

2
rotating_collections/rotatingCollections.pl

@ -33,7 +33,7 @@ my ($template, $loggedinuser, $cookie)
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 1},
flagsrequired => { tools => 'rotating_collections' },
debug => 1,
});

2
rotating_collections/transferCollection.pl

@ -38,7 +38,7 @@ my ($template, $loggedinuser, $cookie)
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 1},
flagsrequired => { tools => 'rotating_collections' },
debug => 1,
});

Loading…
Cancel
Save