Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/catalogue
History
Jonathan Druart ea263a2284 Bug 14449: Add authentication check on retrieving item info when receiving 
The script catalogue/getitem-ajax.pl is called by acqui/orderreceive.pl
when item is receipt.
There is not auth check done, this means anybody can retrieve item info.

Test plan:
With the acquisition => order_receive permission, try to receive an
item.
It should work.

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Very easy to test.

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
2015-07-20 10:10:59 -03:00
..
detail.pl Bug 5010: Fix OPACBaseURL to include protocol 2015-06-04 10:00:04 -03:00
export.pl Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
getitem-ajax.pl Bug 14449: Add authentication check on retrieving item info when receiving 2015-07-20 10:10:59 -03:00
image.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
imageviewer.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
ISBDdetail.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
issuehistory.pl Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:43 -03:00
itemsearch.pl Bug 13950: Sort Item search home library list by branch name 2015-07-08 14:44:57 -03:00
labeledMARCdetail.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
MARCdetail.pl Bug 10938: Item columns displayed in random order 2015-06-05 14:13:39 -03:00
moredetail.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
search-history.pl Bug 11430: Intranet changes 2015-03-11 15:02:42 -03:00
search.pl Bug 14431: FIX encoding issues in search (staff client) 2015-07-07 14:51:39 -03:00
showmarc.pl Bug 6520: Display items for staged record 2015-04-16 13:40:46 -03:00
updateitem.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00