]> git.koha-community.org Git - koha.git/commit
Bug 10565: (follow-up) add new user permission for patron list management
authorGalen Charlton <gmc@esilibrary.com>
Mon, 14 Oct 2013 22:31:37 +0000 (22:31 +0000)
committerGalen Charlton <gmc@esilibrary.com>
Mon, 14 Oct 2013 22:43:03 +0000 (22:43 +0000)
commita10773dc7775e33a10a31f1b4d1cd9ee0696c73d
treef3b07b79251bc995e989212e3a5813b42030fafa
parent353e000e2ab0739eb90e651de16c417028df9553
Bug 10565: (follow-up) add new user permission for patron list management

This patch adds a new user permission for patron list management,
tools => manage_patron_lists.

This closes a security issue with the original patch series where
patron lists and their contents could be retrieved and modified
without requiring authentication of any sort.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
17 files changed:
installer/data/mysql/de-DE/mandatory/userpermissions.sql
installer/data/mysql/en/mandatory/userpermissions.sql
installer/data/mysql/es-ES/mandatory/userpermissions.sql
installer/data/mysql/fr-FR/1-Obligatoire/userpermissions.sql
installer/data/mysql/it-IT/necessari/userpermissions.sql
installer/data/mysql/nb-NO/1-Obligatorisk/userpermissions.sql
installer/data/mysql/pl-PL/mandatory/userpermissions.sql
installer/data/mysql/ru-RU/mandatory/permissions_and_user_flags.sql
installer/data/mysql/uk-UA/mandatory/permissions_and_user_flags.sql
installer/data/mysql/updatedatabase.pl
koha-tmpl/intranet-tmpl/prog/en/modules/members/member.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tools/tools-home.tt
patron_lists/add-modify.pl
patron_lists/delete.pl
patron_lists/list.pl
patron_lists/lists.pl
patron_lists/patrons.pl