Bug 11715: require authentication for various staff scripts
[koha.git] / acqui / newordersubscription.pl
1 #!/usr/bin/perl
2
3 # Copyright 2012 BibLibre
4 #
5 # This file is part of Koha.
6 #
7 # Koha is free software; you can redistribute it and/or modify it under the
8 # terms of the GNU General Public License as published by the Free Software
9 # Foundation; either version 2 of the License, or (at your option) any later
10 # version.
11 #
12 # Koha is distributed in the hope that it will be useful, but WITHOUT ANY
13 # WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
14 # A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
15 #
16 # You should have received a copy of the GNU General Public License along
17 # with Koha; if not, write to the Free Software Foundation, Inc.,
18 # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19
20 use Modern::Perl;
21 use CGI;
22 use C4::Acquisition;
23 use C4::Auth;
24 use C4::Bookseller qw/GetBookSellerFromId/;
25 use C4::Branch;
26 use C4::Context;
27 use C4::Output;
28 use C4::Serials;
29
30 my $query        = new CGI;
31 my $title        = $query->param('title_filter');
32 my $ISSN         = $query->param('ISSN_filter');
33 my $EAN          = $query->param('EAN_filter');
34 my $publisher    = $query->param('publisher_filter');
35 my $supplier     = $query->param('supplier_filter');
36 my $branch       = $query->param('branch_filter');
37 my $routing      = $query->param('routing') || C4::Context->preference("RoutingSerials");
38 my $searched     = $query->param('searched');
39 my $biblionumber = $query->param('biblionumber');
40
41 my $basketno     = $query->param('basketno');
42 my $booksellerid = $query->param('booksellerid');
43
44 my ( $template, $loggedinuser, $cookie, $flags ) = get_template_and_user(
45     {   template_name   => "acqui/newordersubscription.tt",
46         query           => $query,
47         type            => "intranet",
48         authnotrequired => 0,
49         flagsrequired   => { acquisition => 'order_manage' },
50     }
51 );
52
53 my $basket = GetBasket($basketno);
54 $booksellerid = $basket->{booksellerid} unless $booksellerid;
55 my ($bookseller) = GetBookSellerFromId($booksellerid);
56
57 my @subscriptions;
58 if ($searched) {
59     @subscriptions = SearchSubscriptions({
60         title => $title,
61         issn => $ISSN,
62         ean => $EAN,
63         publisher => $publisher,
64         bookseller => $supplier,
65         branch => $branch
66     });
67 }
68
69 foreach my $sub (@subscriptions) {
70     $sub->{alreadyOnOrder} = subscriptionCurrentlyOnOrder $sub->{subscriptionid};
71
72     # to toggle between create or edit routing list options
73     if ($routing) {
74         $sub->{routingedit} = check_routing( $sub->{subscriptionid} );
75     }
76 }
77
78 my $branches = GetBranches();
79 my @branches_loop;
80 foreach (sort keys %$branches){
81     my $selected = 0;
82     $selected = 1 if defined $branch && $branch eq $_;
83     push @branches_loop, {
84         branchcode  => $_,
85         branchname  => $branches->{$_}->{branchname},
86         selected    => $selected,
87     };
88 }
89
90 $template->param(
91     subs_loop        => \@subscriptions,
92     title_filter     => $title,
93     ISSN_filter      => $ISSN,
94     EAN_filter       => $EAN,
95     publisher_filter => $publisher,
96     supplier_filter  => $supplier,
97     branch_filter    => $branch,
98     branches_loop    => \@branches_loop,
99     done_searched    => $searched,
100     routing          => $routing,
101     booksellerid     => $booksellerid,
102     basketno         => $basket->{basketno},
103     basketname       => $basket->{basketname},
104     booksellername   => $bookseller->{name},
105 );
106 output_html_with_http_headers $query, $cookie, $template->output;