Martin Renvoize
bc5decc913
The various subpages of the label creator tool we're under the 'catalogue' permission. There is however a 'label_creator' subpermission of tools which is more appropriate. Test plan 1/ Setup a user with just the 'catelogue' permission (to enable logging into the staff interface) 2/ With the patch applied you should not be able to access the following pages (either via navigation in the UI or by typing them into the browser address bar directly) - /patroncards/add_user_search.pl - /patroncards/edit-batch.pl - /patroncards/edit-layout.pl - /patroncards/edit-profile.pl - /patroncards/edit-template.pl - /patroncards/home.pl - /patroncards/image-manage.pl - /patroncards/manage.pl - /patroncards/print.pl 3/ Signoff Signed-off-by: Owen Leonard <oleonard@myacpl.org> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> |
||
---|---|---|
.. | ||
add_user_search.pl | ||
create-pdf.pl | ||
edit-batch.pl | ||
edit-layout.pl | ||
edit-profile.pl | ||
edit-template.pl | ||
home.pl | ||
image-manage.pl | ||
manage.pl | ||
print.pl |