Koha/members
Jonathan Druart b35dd15a4a Bug 14566: Fix permissions in patronimage.pl
There is no permission needed to access the patronimage.pl script.
This means anybody cans access to the patron's images.

Test plan:
Add an image to borrowernumber 42 and call
/cgi-bin/koha/members/patronimage.pl?borrowernumber=42

If you are logged in with borrowers permissions, you will see the image,
otherwise you will get a blank page with a 403 header.

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
2015-08-24 10:29:49 -03:00
..
boraccount.pl Bug 11804: Remove references to circ-menu.tt 2015-06-22 16:57:12 -03:00
default_messageprefs.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
deletemem.pl Bug 13910: Prevent delete of one's own patron account 2015-05-14 11:45:40 -03:00
discharge.pl Bug 14280: Add branches fields to discharges letters 2015-06-11 13:12:32 -03:00
discharges.pl Bug 8007: Discharge management 2015-04-30 12:33:56 -03:00
files.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
guarantor_search.pl Bug 13891: DataTables server-side processing - Fix regressions 2015-04-13 10:55:30 -03:00
mancredit.pl Bug 4041: Third step - Display address on patron's pages using the system preference 2015-04-29 11:25:11 -03:00
maninvoice.pl Bug 4041: Third step - Display address on patron's pages using the system preference 2015-04-29 11:25:11 -03:00
member-flags.pl Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
member-password.pl Bug 14484: warns when changing patron pw 2015-08-20 13:45:29 -03:00
member.pl Bug 7380: Rename filter to avoid confusion 2015-05-19 10:10:31 -03:00
memberentry.pl Bug 5685: Validation of email address field 2015-07-24 13:47:32 -03:00
members-home.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
members-update-do.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
members-update.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
mod_debarment.pl Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
moremember.pl Bug 14324: Display "Add Child" for Organisations on circ/circulation.pl 2015-06-23 10:19:35 -03:00
nl-search.pl Bug 14038: Make nl-search.pl not using C4::Members::Search 2015-05-15 15:37:09 -03:00
notices.pl Bug 4041: Third step - Display address on patron's pages using the system preference 2015-04-29 11:25:11 -03:00
patronimage.pl Bug 14566: Fix permissions in patronimage.pl 2015-08-24 10:29:49 -03:00
pay.pl Bug 14498: uri_escape error triggered by duplicate accountno's for patron 2015-08-20 13:41:38 -03:00
paycollect.pl Bug 11804: Remove references to circ-menu.tt 2015-06-22 16:57:12 -03:00
printfeercpt.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
printinvoice.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
printslip.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
purchase-suggestions.pl Bug 4041: Third step - Display address on patron's pages using the system preference 2015-04-29 11:25:11 -03:00
readingrec.pl Bug 4041: Third step - Display address on patron's pages using the system preference 2015-04-29 11:25:11 -03:00
routing-lists.pl Bug 4041: Third step - Display address on patron's pages using the system preference 2015-04-29 11:25:11 -03:00
setstatus.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
statistics.pl Bug 4041: Third step - Display address on patron's pages using the system preference 2015-04-29 11:25:11 -03:00
summary-print.pl Bug 10423: Show date due with time if it's a hourly loan 2015-04-24 20:15:50 -03:00
update-child.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00