From 381d46341c7061f649400975a3c5b7a008feba64 Mon Sep 17 00:00:00 2001
From: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Date: Thu, 5 Nov 2020 14:39:53 +0100
Subject: [PATCH] Bug 24603: Adjust permissions for cancel-charge.pl

members/cancel-charge.pl should have the same permissions check than boraccount
(borrowers => edit_borrowers was missing)

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 members/cancel-charge.pl | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/members/cancel-charge.pl b/members/cancel-charge.pl
index 91184036e9..4c655fa174 100755
--- a/members/cancel-charge.pl
+++ b/members/cancel-charge.pl
@@ -25,7 +25,11 @@ use Koha::Token;
 my $cgi = CGI->new;
 
 my $authnotrequired = 0;
-my $flags = { updatecharges => 'remaining_permissions' };
+my $flags = {
+    borrowers     => 'edit_borrowers',
+    updatecharges => 'remaining_permissions'
+};
+
 my $type = 'intranet';
 my ($user, $cookie) = C4::Auth::checkauth($cgi, $authnotrequired, $flags, $type);
 
-- 
2.20.1