Bug 35980: Check for CAN_user_borrowers_edit_borrowers in members-toolbar.inc

This patch removes the message button and more links from the members toolbar if the user does not have CAN_user_borrowers_edit_borrowers

To test:
1. Log in with a user with only 'catalogue' and 'list_borrowers' permissions
2. Search for a patron
3. Notice the 'Add message' and 'More' buttons in the toolbar only link to permissions errors
3. Apply patch, restart all, reload the page
4. Notice the buttons in the toolbar are gone

Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
(cherry picked from commit 962290a27d)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
This commit is contained in:
Brendan Lawlor 2024-04-04 16:35:58 +00:00 committed by Fridolin Somers
parent c13b941429
commit b2ab2e2745
1 changed files with 7 additions and 3 deletions

View File

@ -44,13 +44,16 @@
<a id="searchtohold" class="btn btn-default" href="#"><i class="fa fa-search"></i> Search to hold</a>
[% END %]
<a id="addnewmessageLabel" href="#add_message_form" data-toggle="modal" class="btn btn-default"><i class="fa-solid fa-comment"></i> Add message</a>
[% IF CAN_user_borrowers_edit_borrowers %]
<a id="addnewmessageLabel" href="#add_message_form" data-toggle="modal" class="btn btn-default"><i class="fa-solid fa-comment"></i> Add message</a>
[% END %]
[% IF Koha.Preference('CurbsidePickup') %]
<a id="curbsidePickupLabel" href="/cgi-bin/koha/circ/curbside_pickups.pl?op=find-patron&borrowernumber=[% patron.borrowernumber | html %]" class="btn btn-default"><i class="fa-solid fa-rotate"></i> Schedule pickup</a>
[% END %]
<div class="btn-group">
[% IF CAN_user_borrowers_edit_borrowers %]
<div class="btn-group">
<button class="btn btn-default dropdown-toggle" data-toggle="dropdown">More <span class="caret"></span></button>
<ul class="dropdown-menu dropdown-menu-right">
[% IF CAN_user_borrowers_edit_borrowers %]
@ -113,7 +116,8 @@
[% END %]
[% END %]
</ul>
</div>
</div>
[% END %]
</div>
<!-- Modal -->