08871a324f
This patch uses check_api_auth instead of get_template_and_user. Test plan: Confirm that you are still able to access to the quote editor with the edit_quotes permission. Confirm that you are not if you don't have the permission. wget your_url/cgi-bin/koha/tools/quotes/quotes_ajax.pl should return "403 : Forbidden." Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de> Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar> |
||
---|---|---|
.. | ||
csv-profiles | ||
quotes | ||
ajax-inventory.pl | ||
background-job-progress.pl | ||
batch_delete_records.pl | ||
batch_record_modification.pl | ||
batch_records_ajax.pl | ||
batchMod.pl | ||
cleanborrowers.pl | ||
copy-holidays.pl | ||
csv-profiles.pl | ||
exceptionHolidays.pl | ||
export.pl | ||
holidays.pl | ||
import_borrowers.pl | ||
inventory.pl | ||
koha-news.pl | ||
letter.pl | ||
manage-marc-import.pl | ||
marc_modification_templates.pl | ||
modborrowers.pl | ||
newHolidays.pl | ||
overduerules.pl | ||
picture-upload.pl | ||
quotes-upload.pl | ||
quotes.pl | ||
scheduler.pl | ||
showdiffmarc.pl | ||
stage-marc-import.pl | ||
tools-home.pl | ||
upload-cover-image.pl | ||
upload-file-progress.pl | ||
upload-file.pl | ||
viewlog.pl |