]> git.koha-community.org Git - koha.git/commit
Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)
authorJonathan Druart <jonathan.druart@koha-community.org>
Wed, 24 Jun 2015 09:03:22 +0000 (11:03 +0200)
committerLiz <wizzyrea@gmail.com>
Sun, 5 Jul 2015 02:20:59 +0000 (02:20 +0000)
commitaa357855e45d54e48b1ba6314b2761a1a847756e
tree27f2894888c41208116626b3b157567b1404586f
parentcf229ccc7f0612b96eb23a95a31faee4ed9021e4
Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)

This patch uses check_api_auth instead of get_template_and_user.

Test plan:
Confirm that you are still able to access to the quote editor with the
edit_quotes permission.
Confirm that you are not if you don't have the permission.

wget your_url/cgi-bin/koha/tools/quotes/quotes_ajax.pl
should return "403 : Forbidden."

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
(cherry picked from commit 08871a324fa731ffdbbe87afde1ee145c604a22b)
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Signed-off-by: Liz <wizzyrea@gmail.com>
tools/quotes/quotes-upload_ajax.pl
tools/quotes/quotes_ajax.pl