Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/admin
History
Katrin Fischer 915b4431e5 Bug 26721: Fix permission check on debit and credit type admin pages 
At the moment the pages falsely check for parameters_remaining_permissions,
but they should check the specific manage_accounts permission.

To test:
- Create a new staff user with only catalog and manage_acccounts
  permissions
- Log in with this staff user and go to the admin page
- You will see the debit and credit type sections, but won't be
  able to access them
- Apply the patch
- Veriy the links still show, but pages are now accessible

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2020-11-03 10:57:35 +01:00
..
searchengine/elasticsearch Bug 26487: Add all MARC flavours for not-onloan-count search field 2020-11-02 11:03:08 +01:00
add_user_search.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
additional-fields.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
admin-home.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
adveditorshortcuts.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
aqbudgetperiods.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
aqbudgets.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
aqcontract.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
aqplan.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
audio_alerts.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
auth_subfields_structure.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
auth_tag_structure.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
authorised_values.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
authtypes.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
background_jobs.pl Bug 25898: Fix new occurrences 2020-10-15 13:56:41 +02:00
biblio_framework.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
branch_transfer_limits.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
branches.pl Bug 22343: Allow choosing an SMTP server in branches.pl 2020-10-02 10:54:41 +02:00
cash_registers.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
categories.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
check_budget_parent.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
check_parent_total.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkmarc.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
cities.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
classsources.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
clone-rules.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
columns_settings.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
columns_settings.yml Bug 26595: Embed the whole smtp_server object 2020-10-14 15:53:38 +02:00
credit_types.pl Bug 26721: Fix permission check on debit and credit type admin pages 2020-11-03 10:57:35 +01:00
currency.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
debit_types.pl Bug 26721: Fix permission check on debit and credit type admin pages 2020-11-03 10:57:35 +01:00
desks.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
didyoumean.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
edi_accounts.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
edi_ean_accounts.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
import_export_framework.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
item_circulation_alerts.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
items_search_field.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
items_search_fields.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
itemtypes.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
koha2marclinks.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
library_groups.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
localization.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
marc_subfields_structure.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
marctagstructure.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
matching-rules.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
oai_set_mappings.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
oai_sets.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
overdrive.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
patron-attr-types.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
preferences.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
share_content.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
smart-rules.pl Bug 26529: (follow-up) Remove other instance of blanking holdallowed from script 2020-10-09 13:06:59 +02:00
sms_providers.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
smtp_servers.pl Bug 26290: Display the correct default values on the admin page 2020-10-02 15:27:18 +02:00
sru_modmapping.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
systempreferences.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
transport-cost-matrix.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
usage_statistics.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
z3950servers.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00