]> git.koha-community.org Git - koha.git/commit
Bug 14449: Add authentication check on retrieving item info when receiving
authorJonathan Druart <jonathan.druart@koha-community.org>
Wed, 24 Jun 2015 09:24:14 +0000 (11:24 +0200)
committerTomas Cohen Arazi <tomascohen@unc.edu.ar>
Mon, 20 Jul 2015 13:10:59 +0000 (10:10 -0300)
commitea263a2284f1b81da5718a0cfbc581909c86cf4a
tree826d6ddc3c70d6730bfbaba5851e79f3dc68ff90
parentcd9a827b6928ed0cb80c78ebf897e2d77132296a
Bug 14449: Add authentication check on retrieving item info when receiving

The script catalogue/getitem-ajax.pl is called by acqui/orderreceive.pl
when item is receipt.
There is not auth check done, this means anybody can retrieve item info.

Test plan:
With the acquisition => order_receive permission, try to receive an
item.
It should work.

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Very easy to test.

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
catalogue/getitem-ajax.pl