Bug 29544: Ensure logged in user is allowed to modify checkout note

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>

opac/svc/checkout_notes

@@ -75,7 +75,7 @@ if ($is_ajax) {
             }
         }
 
-        if ( $issue ) {
+        if ( $issue && $status eq "saved" ) {
             $issue->set({ notedate => dt_from_string(), note => $clean_note, noteseen => 0 })->store;
             if($clean_note) { # only send email if note not empty
                 my $branch = Koha::Libraries->find( $issue->branchcode );