From 87c1f304d6c236778d7675d6bf1619b4ce23a5a8 Mon Sep 17 00:00:00 2001
From: Nick Clemens <nick@bywatersolutions.com>
Date: Thu, 14 Dec 2023 17:10:35 +0000
Subject: [PATCH] Bug 35574: Bookings tab from biblio details should only
 require manage_bookings permission

TO test:
1 - Find or create a staff user
2 - Grant permissions:
    circulate: manage_bookings, circ_remaining_permissions
    catalogue
3 - Open a record details, go to items tab, mark an item as bookable
4 - Sign out and sign in as the patron above (or use a private window to sign in)
5 - Place a booking on the record located above
6 - Success
7 - Try to view the bookings tab
8 - Fail, you don't have permission
9 - Apply patch
10 - Success!

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
---
 bookings/list.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bookings/list.pl b/bookings/list.pl
index 66fbd0f452..6333287e04 100755
--- a/bookings/list.pl
+++ b/bookings/list.pl
@@ -30,7 +30,7 @@ my ( $template, $borrowernumber, $cookie, $flags ) = get_template_and_user(
         template_name => "bookings/list.tt",
         query         => $input,
         type          => "intranet",
-        flagsrequired => { circulate => 1 },
+        flagsrequired => { circulate => 'manage_bookings' },
     }
 );
 
-- 
2.39.5