From b348c07f969a5bd17f25e5ced681ad44aa351c0e Mon Sep 17 00:00:00 2001 From: Tomas Cohen Arazi Date: Thu, 27 Aug 2015 11:31:42 -0300 Subject: [PATCH] Bug 14737: wrong permissions required for cn_browser.pl plugin The cn_browser.pl cataloguing plugin only searches for used callnumbers on the bibliographic database. There is no need for this plugin to require special permissions besides access to the catalog. To test: - Link the cb_browser.pl cataloguing plugin to 952$o in your favourite cataloguing framework - Login with a superlibrarian user - Try the plugin => SUCCESS: you can use it - Login with a user that has the full 'tools' permission - Try the plugin => SUCCSES: you can use it - Login with a user that doesn't have full 'tools' permission but has the normal catalogue and cataloguing permissions. - Try the plugin => FAIL: you are requested to login with a different user - Apply the patch - Retry => SUCCESS: you can use it - Sign off :-D Signed-off-by: Jonathan Druart Signed-off-by: Marcel de Rooy Signed-off-by: Tomas Cohen Arazi --- cataloguing/value_builder/cn_browser.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cataloguing/value_builder/cn_browser.pl b/cataloguing/value_builder/cn_browser.pl index 9aa2631fa0..9599666f9d 100755 --- a/cataloguing/value_builder/cn_browser.pl +++ b/cataloguing/value_builder/cn_browser.pl @@ -37,7 +37,7 @@ sub plugin { query => $cgi, type => "intranet", authnotrequired => 0, - flagsrequired => { tools => 'cn_browser', catalogue => 1 }, + flagsrequired => { catalogue => 1 }, } ); -- 2.39.5