a10773dc77
This patch adds a new user permission for patron list management, tools => manage_patron_lists. This closes a security issue with the original patch series where patron lists and their contents could be retrieved and modified without requiring authentication of any sort. Signed-off-by: Galen Charlton <gmc@esilibrary.com> |
||
---|---|---|
.. | ||
auth_values.sql | ||
auth_values.txt | ||
class_sources.sql | ||
class_sources.txt | ||
message_transport_types.sql | ||
message_transport_types.txt | ||
sample_notices.sql | ||
sample_notices.txt | ||
sample_notices_message_attributes.sql | ||
sample_notices_message_attributes.txt | ||
sample_notices_message_transports.sql | ||
sample_notices_message_transports.txt | ||
stopwords.sql | ||
stopwords.txt | ||
subtag_registry.sql | ||
subtag_registry.txt | ||
system_preferences.sql | ||
system_preferences.txt | ||
userflags.sql | ||
userflags.txt | ||
userpermissions.sql | ||
userpermissions.txt |