Koha/koha-tmpl/intranet-tmpl
Martin Renvoize 4356e678f2 Bug 26023: Properly secure the cashup action for libraries
The libraries summary page for cash management is available for users
wit the 'anonymous_refund' permission to allow them to navigate to
alternate cash registers and search for the prior transaction to refund.

However, currently the cashup option appears, and is not blocked at the
server, for all user who may access the page. It should be blocked for
those users without the 'cashup' permission.

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2020-08-24 10:12:42 +02:00
..
js Bug 5428: Jump back to the search result after deleting a record 2020-08-13 07:55:45 +02:00
lib Bug 11446: Use encodeURIComponent on search terms in authority lookup plugin 2020-05-18 15:25:54 +01:00
prog Bug 26023: Properly secure the cashup action for libraries 2020-08-24 10:12:42 +02:00