From 381d46341c7061f649400975a3c5b7a008feba64 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Thu, 5 Nov 2020 14:39:53 +0100 Subject: [PATCH] Bug 24603: Adjust permissions for cancel-charge.pl members/cancel-charge.pl should have the same permissions check than boraccount (borrowers => edit_borrowers was missing) Signed-off-by: Jonathan Druart --- members/cancel-charge.pl | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/members/cancel-charge.pl b/members/cancel-charge.pl index 91184036e9..4c655fa174 100755 --- a/members/cancel-charge.pl +++ b/members/cancel-charge.pl @@ -25,7 +25,11 @@ use Koha::Token; my $cgi = CGI->new; my $authnotrequired = 0; -my $flags = { updatecharges => 'remaining_permissions' }; +my $flags = { + borrowers => 'edit_borrowers', + updatecharges => 'remaining_permissions' +}; + my $type = 'intranet'; my ($user, $cookie) = C4::Auth::checkauth($cgi, $authnotrequired, $flags, $type); -- 2.39.5