瀏覽代碼

Bug 27716: Update permissions for patroncards creator

The various subpages of the label creator tool we're under the
'catalogue' permission. There is however a 'label_creator' subpermission
of tools which is more appropriate.

Test plan
1/ Setup a user with just the 'catelogue' permission (to enable logging
into the staff interface)
2/ With the patch applied you should not be able to access the following
pages (either via navigation in the UI or by typing them into the
browser address bar directly)
  - /patroncards/add_user_search.pl
  - /patroncards/edit-batch.pl
  - /patroncards/edit-layout.pl
  - /patroncards/edit-profile.pl
  - /patroncards/edit-template.pl
  - /patroncards/home.pl
  - /patroncards/image-manage.pl
  - /patroncards/manage.pl
  - /patroncards/print.pl
3/ Signoff

Signed-off-by: Owen Leonard <oleonard@myacpl.org>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
21.05.x
Martin Renvoize 3 年前
提交者 Jonathan Druart
父節點
當前提交
bc5decc913
  1. 2
      patroncards/add_user_search.pl
  2. 2
      patroncards/edit-batch.pl
  3. 2
      patroncards/edit-layout.pl
  4. 2
      patroncards/edit-profile.pl
  5. 2
      patroncards/edit-template.pl
  6. 2
      patroncards/home.pl
  7. 2
      patroncards/image-manage.pl
  8. 2
      patroncards/manage.pl
  9. 2
      patroncards/print.pl

2
patroncards/add_user_search.pl

@ -34,7 +34,7 @@ my ( $template, $loggedinuser, $cookie, $staff_flags ) = get_template_and_user(
{ template_name => "common/patron_search.tt",
query => $input,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
}
);

2
patroncards/edit-batch.pl

@ -37,7 +37,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "patroncards/edit-batch.tt",
query => $cgi,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
debug => 1,
}
);

2
patroncards/edit-layout.pl

@ -36,7 +36,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "patroncards/edit-layout.tt",
query => $cgi,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
debug => 1,
}
);

2
patroncards/edit-profile.pl

@ -33,7 +33,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "patroncards/edit-profile.tt",
query => $cgi,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
debug => 1,
}
);

2
patroncards/edit-template.pl

@ -34,7 +34,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "patroncards/edit-template.tt",
query => $cgi,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
debug => 1,
}
);

2
patroncards/home.pl

@ -31,7 +31,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "patroncards/home.tt",
query => $cgi,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
debug => 1,
}
);

2
patroncards/image-manage.pl

@ -19,7 +19,7 @@ my ($template, $loggedinuser, $cookie) = get_template_and_user({
template_name => "patroncards/image-manage.tt",
query => $cgi,
type => "intranet",
flagsrequired => {tools => 'batch_upload_patron_images'}, # FIXME: establish flag for patron card creator
flagsrequired => {tools => 'label_creator'},
debug => 0,
});

2
patroncards/manage.pl

@ -37,7 +37,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "patroncards/manage.tt",
query => $cgi,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
debug => 1,
}
);

2
patroncards/print.pl

@ -33,7 +33,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "patroncards/print.tt",
query => $cgi,
type => "intranet",
flagsrequired => { catalogue => 1 },
flagsrequired => { tools => 'label_creator' },
debug => 1,
}
);

載入中…
取消
儲存