From 4e7b570fdbafbeddca8f0ee8520a48456eb74607 Mon Sep 17 00:00:00 2001
From: Mark Hofstetter <mark@hofstetter.at>
Date: Fri, 11 Nov 2022 13:38:08 +0100
Subject: [PATCH] Bug 20207: Don't show anyones's suggestions when
 OPACViewOthersSuggestions is deactivated

When you enable AnonSuggestions and ALLOW patrons that aren't logged
in to make purchase suggestions, once a suggestion has successfully
been submitted, anonymous purchase suggestions will show on OPAC even
when system preference OPACViewOthersSuggestions, is set to Don't show.

The suggestions will show on opac-suggestions.pl. However, if you search
for the title you suggested, you will get a message saying
"You are not authorized to see pending purchase suggestions."

This patch fixes the error, ie if OPACViewOthersSuggestions is set to
false not other suggestions are shown (if you are not logged in and AnonSuggestions)
OR ONLY your own suggestions if you are logged in

To test:
1) activate AnonSuggestions
2) create an anon suggestion
3) create a suggestion with a logged in user
4) toggle OPACViewOthersSuggestions Show/Don't show
5) all suggestions are shown cgi-bin/koha/opac-suggestions.pl in either case
6) apply patch
7) OPACViewOthersSuggestions is now respected ie suggestions from other users are only shown if activated
8) Please sign off

Sponsored-by: Library of the Natural History Museum Vienna

Signed-off-by: David Nind <david@davidnind.com>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
---
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt
index b0613c33db..e62f951682 100644
--- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt
+++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt
@@ -373,7 +373,8 @@
                                         </div>
                                     [% END %]
 
-                                    <table id="suggestt" class="table table-bordered table-striped">
+                                    [% IF Koha.Preference( 'OPACViewOthersSuggestions' ) == 1 || loggedinusername %]
+                                    <table id="suggestt" class="table table-bordered tabled">
                                         <caption class="sr-only">Your purchase suggestions<caption>
                                         <thead>
                                             <tr>
@@ -456,6 +457,7 @@
                                             [% END # / FOREACH suggestions %]
                                         </tbody>
                                     </table>
+                                    [% END %]
 
                                     [% IF ( loggedinusername && can_delete_suggestion ) %]
                                         <fieldset class="action">
-- 
2.39.5