From 45d99e7a0b5769dcfb763884cf2bbc3302dcf111 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Thu, 11 May 2023 12:05:04 +0200 Subject: [PATCH] Bug 33595: (bug 26628 follow-up) Fix authorization for tools-home.pl If you log into the OPAC as a user with no flags, you can see a restricted view of /cgi-bin/koha/tools/tools-home.pl instead of seeing the login screen. Test plan: Use a patron with catalogue permission only Login and access the tools home page => redirected to the login screen Add a club sub permission Login and access the tools home page => You see the tools home page with the clubs link Add a tool sub permission, remove club Login and access the tools home page => You see the tools home page with the relevant link Signed-off-by: David Cook Signed-off-by: Marcel de Rooy --- tools/tools-home.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/tools-home.pl b/tools/tools-home.pl index 8ae7953842..ed7f823485 100755 --- a/tools/tools-home.pl +++ b/tools/tools-home.pl @@ -29,7 +29,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( template_name => "tools/tools-home.tt", query => $query, type => "intranet", - flagsrequired => [ tools => '*', clubs => '*' ], + flagsrequired => [ { tools => '*' }, { clubs => '*' } ], } ); -- 2.39.5