]> git.koha-community.org Git - koha.git/commit
Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)
authorJonathan Druart <jonathan.druart@koha-community.org>
Wed, 24 Jun 2015 09:03:22 +0000 (11:03 +0200)
committerChris Cormack <chrisc@catalyst.net.nz>
Thu, 25 Jun 2015 21:08:43 +0000 (09:08 +1200)
commitdd8d7b1b6fdfb12c1277babd78bc93e01fe7566b
treef1f46e1dc1ed837163306f8e318ed662d3862344
parent3d8af819a84847b35ad08e62ba137d3febd878dd
Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)

This patch uses check_api_auth instead of get_template_and_user.

Test plan:
Confirm that you are still able to access to the quote editor with the
edit_quotes permission.
Confirm that you are not if you don't have the permission.

wget your_url/cgi-bin/koha/tools/quotes/quotes_ajax.pl
should return "403 : Forbidden."

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
(cherry picked from commit 08871a324fa731ffdbbe87afde1ee145c604a22b)
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
tools/quotes/quotes-upload_ajax.pl
tools/quotes/quotes_ajax.pl