]> git.koha-community.org Git - koha.git/commit
Fix for Bug 3140 - It is possible to email someone else's private list
authorOwen Leonard <oleonard@myacpl.org>
Tue, 17 May 2011 15:07:03 +0000 (11:07 -0400)
committerChris Nighswonger <chris.nighswonger@gmail.com>
Mon, 30 May 2011 03:08:55 +0000 (23:08 -0400)
commit7f87543b414c322dc0918901c4fa7e9a17d8b14a
tree0b814db99b44a2e00c73eb41b7d21f91aabb25f6
parentae8a469999596a816f3de59c3328343fc247c1c7
Fix for Bug 3140 - It is possible to email someone else's private list

Adding check for ShelfPossibleAction("view") to make sure the logged
in user has permission to view the selected list when downloading
or emailing a list.

Signed-off-by: Paul Poulain <paul.poulain@biblibre.com>
Signed-off-by: Ian Walls <ian.walls@bywatersolutions.com>
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
(cherry picked from commit b65f6d0a99dc13e73aed5058a44a72895c829b32)

Signed-off-by: Chris Nighswonger <chris.nighswonger@gmail.com>
koha-tmpl/opac-tmpl/prog/en/modules/opac-downloadshelf.tt
koha-tmpl/opac-tmpl/prog/en/modules/opac-sendshelfform.tt
opac/opac-downloadshelf.pl
opac/opac-sendshelf.pl