Bug 6642 : Making sure permissions are checked on label creator
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de> Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
This commit is contained in:
parent
97964bc3e9
commit
9d5d1f8f96
1 changed files with 31 additions and 1 deletions
|
@ -1,16 +1,44 @@
|
|||
#!/usr/bin/perl
|
||||
|
||||
# Copyright Chris Nighswonger 2009
|
||||
#
|
||||
# This file is part of Koha.
|
||||
#
|
||||
# Koha is free software; you can redistribute it and/or modify it under the
|
||||
# terms of the GNU General Public License as published by the Free Software
|
||||
# Foundation; either version 2 of the License, or (at your option) any later
|
||||
# version.
|
||||
#
|
||||
# Koha is distributed in the hope that it will be useful, but WITHOUT ANY
|
||||
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
|
||||
# A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License along
|
||||
# with Koha; if not, write to the Free Software Foundation, Inc.,
|
||||
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
|
||||
|
||||
use strict;
|
||||
use warnings;
|
||||
|
||||
use CGI;
|
||||
|
||||
use C4::Auth;
|
||||
use C4::Debug;
|
||||
use C4::Creators 1.000000;
|
||||
use C4::Labels 1.000000;
|
||||
|
||||
my $cgi = new CGI;
|
||||
|
||||
my ( $template, $loggedinuser, $cookie ) = get_template_and_user({
|
||||
template_name => "labels/label-home.tt",
|
||||
query => $cgi,
|
||||
type => "intranet",
|
||||
authnotrequired => 0,
|
||||
flagsrequired => { tools => 'label_creator' },
|
||||
debug => 1,
|
||||
});
|
||||
|
||||
|
||||
my $batch_id = $cgi->param('batch_id') if $cgi->param('batch_id');
|
||||
my $template_id = $cgi->param('template_id') || undef;
|
||||
my $layout_id = $cgi->param('layout_id') || undef;
|
||||
|
@ -20,6 +48,8 @@ my @item_numbers = $cgi->param('item_number') if $cgi->param('item_number');
|
|||
|
||||
my $items = undef;
|
||||
|
||||
|
||||
|
||||
my $pdf_file = (@label_ids || @item_numbers ? "label_single_" . scalar(@label_ids || @item_numbers) : "label_batch_$batch_id");
|
||||
print $cgi->header( -type => 'application/pdf',
|
||||
-encoding => 'utf-8',
|
||||
|
|
Loading…
Reference in a new issue