Koha/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves
Jonathan Druart ef85122b1d Bug 29542: Prevent access to private list to non authorized users
The catalogue permission is not enough.

Test plan:
Create a private list owned by user A
Login with user B and hit (with XX the shelfid)
  /cgi-bin/koha/virtualshelves/sendshelf.pl?shelfid=XX

You should get an error message "You do not have sufficient permission
to continue."

Login with user A
=> You should be able to send the list

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2022-02-02 21:05:29 -10:00
..
tables Bug 28959: Add virtualshelves.public as a boolean 2021-10-28 17:47:38 +02:00
addbybiblionumber.tt Bug 26703: virtualshelves folder 2021-04-21 11:16:35 +02:00
downloadshelf.tt Bug 28427: Terminology: Shelf should be list 2021-06-21 12:07:28 +02:00
sendshelf.tt Bug 11529: Add templates for biblio title display. Unify display. 2019-08-05 15:03:19 +01:00
sendshelfform.tt Bug 29542: Prevent access to private list to non authorized users 2022-02-02 21:05:29 -10:00
shelves.tt Bug 28959: Add virtualshelves.public as a boolean 2021-10-28 17:47:38 +02:00