]> git.koha-community.org Git - koha.git/commit
Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)
authorJonathan Druart <jonathan.druart@koha-community.org>
Wed, 24 Jun 2015 09:03:22 +0000 (11:03 +0200)
committerTomas Cohen Arazi <tomascohen@unc.edu.ar>
Thu, 25 Jun 2015 17:41:27 +0000 (14:41 -0300)
commit08871a324fa731ffdbbe87afde1ee145c604a22b
tree76c74c4f809ae4b3b42f2cac695cdbfdc0a4c699
parentf1acb5615d0cbcba5db5b84e12fbad3d41454347
Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)

This patch uses check_api_auth instead of get_template_and_user.

Test plan:
Confirm that you are still able to access to the quote editor with the
edit_quotes permission.
Confirm that you are not if you don't have the permission.

wget your_url/cgi-bin/koha/tools/quotes/quotes_ajax.pl
should return "403 : Forbidden."

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
tools/quotes/quotes-upload_ajax.pl
tools/quotes/quotes_ajax.pl