]> git.koha-community.org Git - koha.git/commit
Bug 29541: Prevent users from another group to access patron's images
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Mon, 6 Dec 2021 12:58:25 +0000 (13:58 +0100)
committerWainui Witika-Park <wainuiwitikapark@catalyst.net.nz>
Wed, 26 Jan 2022 03:53:55 +0000 (03:53 +0000)
commit707c7a5eb4ff176b3bf7fa0494d7bf29464bdc89
tree73e8c5511574d29b8a5eb222c761a6cb5b5fb2e8
parentca3a1d31b9177e5e37e1d68ce1fed51a5436d4b6
Bug 29541: Prevent users from another group to access patron's images

We should respect group restrictions here.

Test plan:
Create a patron from another group of libraries and don't let them
access info from patrons outside of this group.
Access the following link and confirm that you can see the image only
for patrons from their group
  /cgi-bin/koha/members/patronimage.pl?borrowernumber=XX

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
(cherry picked from commit 09cb5e02e6fad7b0dd3137d925646d714444a704)

Signed-off-by: Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz>
members/patronimage.pl