Bug 29508: Make GET /patrons/:patron_id use Koha::Patrons->search_limited
authorTomas Cohen Arazi <tomascohen@theke.io>
Wed, 17 Nov 2021 19:36:11 +0000 (16:36 -0300)
committerFridolin Somers <fridolin.somers@biblibre.com>
Thu, 6 Jan 2022 00:03:28 +0000 (14:03 -1000)
commit895fc88605f7381218b38463be17531a06403c1a
treeb5fc926195dea546b335b8ccab8de16dc64a9592
parentd46debdff26d1bc0290149e0da3d1f8ae60cf9cb
Bug 29508: Make GET /patrons/:patron_id use Koha::Patrons->search_limited

This patch makes the route return 404 if the user is not allowed to see
the requested patron information.

To test:
1. Apply the regression tests
2. Run:
   $ kshell
  k$ prove t/db_dependent/api/v1/patrons.t
=> FAIL: The code doesn't respect limits
3. Apply this patch
4. Repeat 2
=> SUCCESS: Tests pass!
5. Sign off :-D

Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
Koha/REST/V1/Patrons.pm