From a050ca83b717c0212e4ae7d102ea1d1f13208edb Mon Sep 17 00:00:00 2001 From: Galen Charlton Date: Fri, 13 Dec 2013 23:04:59 +0000 Subject: [PATCH] Bug 8230: (follow-up) don't link to basket unless user has appropriate permissions With this patch, the basket number on the bib details page is linked to the basket management page only if the staff user has the appropriate permissions. To test: [1] Log in as a user with the acquisition/order_manage permission. Bring up a bib record that is attached to an order and verify that the basket number is an active link. [2] Log in as a user that doesn't have the acquisition/order_manage permission. Verify that the basket number displayed on the bib details page is not a hyperlink. Signed-off-by: Galen Charlton --- koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt index 294496a529..612532b820 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt @@ -841,7 +841,11 @@ function verify_images() { [% FOR order IN orders %] - [% order.basketname %] + [% IF CAN_user_acquisition_order_manage %] + [% order.basketname %] + [% ELSE %] + [% order.basketname %] + [% END %] [% order.ordernumber %] [% order.creationdate | $KohaDates%] [% order.datereceived | $KohaDates%] -- 2.39.5