Bug 29508: Make GET /patrons/:patron_id use Koha::Patrons->search_limited
authorTomas Cohen Arazi <tomascohen@theke.io>
Wed, 17 Nov 2021 19:36:11 +0000 (16:36 -0300)
committerKyle Hall <kyle@bywatersolutions.com>
Fri, 7 Jan 2022 11:35:54 +0000 (06:35 -0500)
commit5ee42b6b6031472dc6637d1f22b53815ecb96121
treefe71c3f7832f164a3cc96548b7b53514a0a1fcea
parentdd3ffbdd7c81927f82e9c19e4ab0c4430346463c
Bug 29508: Make GET /patrons/:patron_id use Koha::Patrons->search_limited

This patch makes the route return 404 if the user is not allowed to see
the requested patron information.

To test:
1. Apply the regression tests
2. Run:
   $ kshell
  k$ prove t/db_dependent/api/v1/patrons.t
=> FAIL: The code doesn't respect limits
3. Apply this patch
4. Repeat 2
=> SUCCESS: Tests pass!
5. Sign off :-D

Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Koha/REST/V1/Patrons.pm