Koha/koha-tmpl/opac-tmpl/prog/en/modules/opac-sendshelfform.tt
Owen Leonard b65f6d0a99 Fix for Bug 3140 - It is possible to email someone else's private list
Adding check for ShelfPossibleAction("view") to make sure the logged
in user has permission to view the selected list when downloading
or emailing a list.

Signed-off-by: Paul Poulain <paul.poulain@biblibre.com>
Signed-off-by: Ian Walls <ian.walls@bywatersolutions.com>
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
2011-05-26 09:50:52 +12:00

49 lines
1.8 KiB
Text

[% INCLUDE 'doc-head-open.inc' %][% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha Online[% END %] Catalog &rsaquo; Sending Your List
[% INCLUDE 'doc-head-close.inc' %]
<script type="text/javascript">//<![CDATA[
$(document).ready(function(){
$(".close").html("Close this window");
});
//]]>
</script>
</head>
<body style="padding: 1em;" id="sendshelf">
<div id="usersendshelfform" class="container">[% IF ( email ) %]
[% IF ( SENT ) %]
<h3>Message Sent</h3>
<p>The list was sent to: [% email %]</p>
<p><a class="focus close" href="/cgi-bin/koha/opac-shelves.pl">Back to lists</a></p>
[% END %]
[% IF ( error ) %]
<p>Problem sending the list...</p>
[% END %]
[% ELSE %]
[% IF ( invalidlist ) %]
<div class="dialog alert">
<p>You do not have permission to send this list.</p>
</div>
<p><a class="button close" href="/cgi-bin/koha/opac-shelves.pl">Back to lists</a></p>
[% ELSE %]
<form action="[% url %]" method="post" id="sendshelfform">
<fieldset class="rows">
<legend>Sending your list</legend>
<ol> <li>
<label for="email">Email Address:</label>
<input type="text" id="email" name="email" size="43" class="focus" />
</li>
<li>
<label for="comment">Comment:</label>
<textarea id="comment" name="comment" rows="4" cols="40"></textarea>
</li>
<li>
<input type="hidden" name="shelfid" value="[% shelfid %]" />
</li></ol></fieldset>
<fieldset class="action"> <input type="submit" value="Send" /> <a class="cancel close" href="#">Cancel</a> </fieldset>
</form>
[% END %]
[% END %]</div>
</body>
</html>