Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity

Bug 33595: (bug 26628 follow-up) Fix authorization for tools-home.pl

Browse source 
If you log into the OPAC as a user with no flags, you can see a restricted view of
/cgi-bin/koha/tools/tools-home.pl instead of seeing the login screen.

Test plan:
Use a patron with catalogue permission only
Login and access the tools home page
=> redirected to the login screen

Add a club sub permission
Login and access the tools home page
=> You see the tools home page with the clubs link

Add a tool sub permission, remove club
Login and access the tools home page
=> You see the tools home page with the relevant link

Signed-off-by: David Cook <dcook@prosentient.com.au>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
(cherry picked from commit 45d99e7a0b)
Signed-off-by: Pedro Amorim <pedro.amorim@ptfs-europe.com>
This commit is contained in:
Jonathan Druart 2023-05-11 12:05:04 +02:00 committed by Pedro Amorim
parent e19ddc58a3
commit e14529807a
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
tools/tools-home.pl
View file

@ -29,7 +29,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "tools/tools-home.tt",
query => $query,
type => "intranet",
flagsrequired => [ tools => '*', clubs => '*' ],
flagsrequired => [ { tools => '*' }, { clubs => '*' } ],
}
);