gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'new/security-release-19.11.09' into 19.11.x 

Signed-off-by: Aleisha Amohia <aleishaamohia@hotmail.com>
This commit is contained in:
Aleisha Amohia 2020-08-19 07:11:07 +12:00
parent b06292b883 6b6f60056a
commit b98ca4bf46
421 changed files with 243 additions and 451 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
C4/Auth.pm
View File

@ -169,7 +169,9 @@ sub get_template_and_user {
$in->{'query'},
$in->{'authnotrequired'},
$in->{'flagsrequired'},
$in->{'type'}
$in->{'type'},
undef,
$in->{template_name},
);
}
@ -228,6 +230,7 @@ sub get_template_and_user {
-value => '',
-expires => '',
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
$template->param(
@ -447,11 +450,6 @@ sub get_template_and_user {
# these template parameters are set the same regardless of $in->{'type'}
# Set the using_https variable for templates
# FIXME Under Plack the CGI->https method always returns 'OFF'
my $https = $in->{query}->https();
my $using_https = ( defined $https and $https ne 'OFF' ) ? 1 : 0;
my $minPasswordLength = C4::Context->preference('minPasswordLength');
$minPasswordLength = 3 if not $minPasswordLength or $minPasswordLength < 3;
$template->param(
@ -471,7 +469,6 @@ sub get_template_and_user {
singleBranchMode => ( Koha::Libraries->search->count == 1 ),
XSLTDetailsDisplay => C4::Context->preference("XSLTDetailsDisplay"),
XSLTResultsDisplay => C4::Context->preference("XSLTResultsDisplay"),
using_https => $using_https,
noItemTypeImages => C4::Context->preference("noItemTypeImages"),
marcflavour => C4::Context->preference("marcflavour"),
OPACBaseURL => C4::Context->preference('OPACBaseURL'),
@ -791,8 +788,21 @@ sub checkauth {
my $flagsrequired = shift;
my $type = shift;
my $emailaddress = shift;
my $template_name = shift;
$type = 'opac' unless $type;
unless ( C4::Context->preference("OpacPublic") ) {
my @allowed_scripts_for_private_opac = qw(
opac-memberentry.tt
opac-registration-email-sent.tt
opac-registration-confirmation.tt
opac-memberentry-update-submitted.tt
opac-password-recovery.tt
);
$authnotrequired = 0 unless grep { $_ eq $template_name }
@allowed_scripts_for_private_opac;
}
my $dbh = C4::Context->dbh;
my $timeout = _timeout_syspref();
@ -830,6 +840,7 @@ sub checkauth {
-value => '',
-expires => '',
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
$loggedin = 1;
}
@ -930,7 +941,8 @@ sub checkauth {
$cookie = $query->cookie(
-name => 'CGISESSID',
-value => $session->id,
-HttpOnly => 1
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
$session->param( 'lasttime', time() );
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in...
@ -959,7 +971,8 @@ sub checkauth {
$cookie = $query->cookie(
-name => 'CGISESSID',
-value => $session->id,
-HttpOnly => 1
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
my $pki_field = C4::Context->preference('AllowPKIAuth');
if ( !defined($pki_field) ) {
@ -1127,7 +1140,8 @@ sub checkauth {
$cookie = $query->cookie(
-name => 'CGISESSID',
-value => '',
-HttpOnly => 1
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
$info{'wrongip'} = 1;
}
@ -1207,7 +1221,8 @@ sub checkauth {
$cookie = $query->cookie(
-name => 'CGISESSID',
-value => '',
-HttpOnly => 1
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
}
@ -1248,8 +1263,8 @@ sub checkauth {
$LibraryNameTitle =~ s/<(?:\/?)(?:br|p)\s*(?:\/?)>/ /sgi;
$LibraryNameTitle =~ s/<(?:[^<>'"]|'(?:[^']*)'|"(?:[^"]*)")*>//sg;
my $template_name = ( $type eq 'opac' ) ? 'opac-auth.tt' : 'auth.tt';
my $template = C4::Templates::gettemplate( $template_name, $type, $query );
my $auth_template_name = ( $type eq 'opac' ) ? 'opac-auth.tt' : 'auth.tt';
my $template = C4::Templates::gettemplate( $auth_template_name, $type, $query );
$template->param(
login => 1,
INPUTS => \@inputs,
@ -1475,6 +1490,7 @@ sub check_api_auth {
-name => 'CGISESSID',
-value => $session->id,
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
$session->param( 'lasttime', time() );
my $flags = haspermission( $userid, $flagsrequired );
@ -1529,6 +1545,7 @@ sub check_api_auth {
-name => 'CGISESSID',
-value => $sessionID,
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
if ( $return == 1 ) {
my (

26
C4/Context.pm
View File

@ -1119,6 +1119,32 @@ sub set_remote_address {
}
}
=head3 https_enabled
https_enabled should be called when checking if a HTTPS connection
is used.
Note that this depends on a HTTPS environmental variable being defined
by the web server. This function may not return the expected result,
if your web server or reverse proxies are not setting the correct
X-Forwarded-Proto headers and HTTPS environmental variable.
Note too that the HTTPS value can vary from web server to web server.
We are relying on the convention of the value being "on" or "ON" here.
=cut
sub https_enabled {
my $https_enabled = 0;
my $env_https = $ENV{HTTPS};
if ($env_https){
if ($env_https =~ /^ON$/i){
$https_enabled = 1;
}
}
return $https_enabled;
}
1;
__END__

8
C4/InstallAuth.pm
View File

@ -267,6 +267,7 @@ sub checkauth {
-name => 'CGISESSID',
-value => $session->id,
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
$loggedin = 1;
$userid = $session->param('cardnumber');
@ -307,6 +308,7 @@ sub checkauth {
-name => 'CGISESSID',
-value => $sessionID,
-HttpOnly => 1,
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
if ( $return == 2 ) {
@ -352,7 +354,8 @@ sub checkauth {
-name => 'CGISESSID',
-value => '',
-HttpOnly => 1,
-expires => ''
-expires => '',
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
}
if ($envcookie) {
@ -394,7 +397,8 @@ sub checkauth {
-name => 'CGISESSID',
-value => $sessionID,
-HttpOnly => 1,
-expires => ''
-expires => '',
-secure => ( C4::Context->https_enabled() ? 1 : 0 ),
);
print $query->header(
-type => 'text/html; charset=utf-8',

13
Koha/Patron.pm
View File

@ -1339,6 +1339,19 @@ sub has_permission {
return C4::Auth::haspermission( $self->userid, $flagsrequired );
}
=head3 is_superlibrarian
my $is_superlibrarian = $patron->is_superlibrarian;
Return true if the patron is a superlibrarian.
=cut
sub is_superlibrarian {
my ($self) = @_;
return $self->has_permission( { superlibrarian => 1 } );
}
=head3 is_adult
my $is_adult = $patron->is_adult

32
Koha/REST/V1/Patrons.pm
View File

@ -194,6 +194,38 @@ sub update {
}
return try {
my $body = $c->validation->param('body');
my $user = $c->stash('koha.user');
if (
$patron->is_superlibrarian
and !$user->is_superlibrarian
and ( exists $body->{email}
or exists $body->{secondary_email}
or exists $body->{altaddress_email} )
)
{
foreach my $email_field ( qw(email secondary_email altaddress_email) ) {
my $exists_email = exists $body->{$email_field};
next unless $exists_email;
# exists, verify if we are asked to change it
my $put_email = $body->{$email_field};
# As of writing this patch, 'email' is the only unmapped field
# (i.e. it preserves its name, hence this fallback)
my $db_email_field = $patron->to_api_mapping->{$email_field} // 'email';
my $db_email = $patron->$db_email_field;
return $c->render(
status => 403,
openapi => { error => "Not enough privileges to change a superlibrarian's email" }
)
unless ( !defined $put_email and !defined $db_email )
or ( defined $put_email
and defined $db_email
and $put_email eq $db_email );
}
}
$patron->set_from_api($c->validation->param('body'))->store;
$patron->discard_changes;

1
about.pl
View File

@ -60,7 +60,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "about.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
debug => 1,
}

1
acqui/acqui-home.pl
View File

@ -44,7 +44,6 @@ my ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
{ template_name => 'acqui/acqui-home.tt',
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => '*' },
debug => 1,
}

1
acqui/add_user_search.pl
View File

@ -34,7 +34,6 @@ my ( $template, $loggedinuser, $cookie, $staff_flags ) = get_template_and_user(
{ template_name => "common/patron_search.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
}
);

2
acqui/addorder.pl
View File

@ -161,7 +161,6 @@ unless($confirm_budget_exceeding) {
template_name => "acqui/addorder.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {acquisition => 'order_manage'},
});
@ -218,7 +217,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "acqui/booksellers.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
}

1
acqui/addorderiso2709.pl
View File

@ -55,7 +55,6 @@ my ($template, $loggedinuser, $cookie, $userflags) = get_template_and_user({
template_name => "acqui/addorderiso2709.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
});

1
acqui/basket.pl
View File

@ -85,7 +85,6 @@ our ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
template_name => "acqui/basket.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
}

1
acqui/basketgroup.pl
View File

@ -65,7 +65,6 @@ our ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "acqui/basketgroup.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {acquisition => 'group_manage'},
debug => 1,
});

1
acqui/basketheader.pl
View File

@ -63,7 +63,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "acqui/basketheader.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
}

1
acqui/booksellers.pl
View File

@ -69,7 +69,6 @@ my ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
{ template_name => 'acqui/booksellers.tt',
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => '*' },
debug => 1,
}

1
acqui/cancelorder.pl
View File

@ -42,7 +42,6 @@ my ($template, $loggedinuser, $cookie, $flags) = get_template_and_user( {
template_name => 'acqui/cancelorder.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { 'acquisition' => 'order_manage' },
debug => 1,
} );

1
acqui/check_budget_total.pl
View File

@ -38,7 +38,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "acqui/ajax.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
debug => 1, } );
my $budget = GetBudget($budget_id);

1
acqui/duplicate_orders.pl
View File

@ -39,7 +39,6 @@ my ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
template_name => "acqui/duplicate_orders.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
}
);

1
acqui/edi_ean.pl
View File

@ -51,7 +51,6 @@ else {
template_name => 'acqui/edi_ean.tt',
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
}

1
acqui/edifactmsgs.pl
View File

@ -30,7 +30,6 @@ my ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
template_name => 'acqui/edifactmsgs.tt',
query => $q,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => 'edi_manage' },
debug => 1,
}

1
acqui/edimsg.pl
View File

@ -30,7 +30,6 @@ my ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
template_name => 'acqui/edimsg.tt',
query => $q,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => 'edi_manage' },
debug => 1,
}

1
acqui/histsearch.pl
View File

@ -68,7 +68,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "acqui/histsearch.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => '*' },
debug => 1,
}

1
acqui/invoice-files.pl
View File

@ -41,7 +41,6 @@ my ( $template, $loggedinuser, $cookie, $flags ) = get_template_and_user(
template_name => 'acqui/invoice-files.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { 'acquisition' => '*' },
debug => 1,
}

1
acqui/invoice.pl
View File

@ -46,7 +46,6 @@ my ( $template, $loggedinuser, $cookie, $flags ) = get_template_and_user(
template_name => 'acqui/invoice.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { 'acquisition' => '*' },
debug => 1,
}

1
acqui/invoices.pl
View File

@ -43,7 +43,6 @@ my ( $template, $loggedinuser, $cookie, $flags ) = get_template_and_user(
template_name => 'acqui/invoices.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { 'acquisition' => '*' },
debug => 1,
}

1
acqui/lateorders-export.pl
View File

@ -28,7 +28,6 @@ my ($template, $loggedinuser, $cookie) = get_template_and_user({
template_name => "acqui/csv/lateorders.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {acquisition => 'order_receive'},
});
my @ordernumbers = $input->multi_param('ordernumber');

1
acqui/lateorders.pl
View File

@ -60,7 +60,6 @@ my ($template, $loggedinuser, $cookie) = get_template_and_user(
template_name => "acqui/lateorders.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_receive' },
debug => 1,
}

1
acqui/modordernotes.pl
View File

@ -40,7 +40,6 @@ my ($template, $loggedinuser, $cookie, $flags) = get_template_and_user( {
template_name => 'acqui/modordernotes.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { 'acquisition' => '*' },
debug => 1,
} );

2
acqui/neworderempty.pl
View File

@ -115,7 +115,6 @@ our ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
template_name => "acqui/neworderempty.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
}
@ -572,7 +571,6 @@ sub Load_Duplicate {
template_name => "acqui/neworderempty_duplicate.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
# debug => 1,
}

1
acqui/newordersubscription.pl
View File

@ -45,7 +45,6 @@ my ( $template, $loggedinuser, $cookie, $flags ) = get_template_and_user(
{ template_name => "acqui/newordersubscription.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
}
);

1
acqui/ordered.pl
View File

@ -45,7 +45,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "acqui/ordered.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => '*' },
debug => 1,
}

1
acqui/orderreceive.pl
View File

@ -99,7 +99,6 @@ my ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
template_name => "acqui/orderreceive.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {acquisition => 'order_receive'},
debug => 1,
}

1
acqui/parcel.pl
View File

@ -81,7 +81,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "acqui/parcel.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {acquisition => 'order_receive'},
debug => 1,
});

1
acqui/parcels.pl
View File

@ -92,7 +92,6 @@ our ( $template, $loggedinuser, $cookie, $flags ) = get_template_and_user(
{ template_name => 'acqui/parcels.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => 'order_receive' },
debug => 1,
}

1
acqui/showorder.pl
View File

@ -29,7 +29,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user({
template_name => "acqui/showorder.tt",
query => $cgi,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => '*' },
});

1
acqui/spent.pl
View File

@ -47,7 +47,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "acqui/spent.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => '*' },
debug => 1,
}

1
acqui/supplier.pl
View File

@ -59,7 +59,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => 'acqui/supplier.tt',
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => '*' },
debug => 1,
}

1
acqui/uncertainprice.pl
View File

@ -61,7 +61,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "acqui/uncertainprice.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
});

1
admin/add_user_search.pl
View File

@ -34,7 +34,6 @@ my ( $template, $loggedinuser, $cookie, $staff_flags ) = get_template_and_user(
{ template_name => "common/patron_search.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'budget_modify' },
}
);

1
admin/additional-fields.pl
View File

@ -41,7 +41,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/additional-fields.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => \%flagsrequired,
debug => 1,
}

1
admin/admin-home.pl
View File

@ -32,7 +32,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/admin-home.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => '*' },
debug => 1,
}

1
admin/adveditorshortcuts.pl
View File

@ -50,7 +50,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "admin/adveditorshortcuts.tt",
query => $input,
type => "intranet",
authnotrequired => 1,
flagsrequired => { parameters => 'manage_keyboard_shortcuts' },
debug => 1,
}

1
admin/aqbudgetperiods.pl
View File

@ -82,7 +82,6 @@ my ($template, $borrowernumber, $cookie, $staff_flags ) = get_template_and_user(
template_name => "admin/aqbudgetperiods.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'period_manage' },
debug => 1,
}

1
admin/aqbudgets.pl
View File

@ -43,7 +43,6 @@ my ($template, $borrowernumber, $cookie, $staffflags ) = get_template_and_user(
{ template_name => "admin/aqbudgets.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'budget_manage' },
debug => 0,
}

1
admin/aqcontract.pl
View File

@ -41,7 +41,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "admin/aqcontract.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'contracts_manage' },
debug => 1,
}

1
admin/aqplan.pl
View File

@ -45,7 +45,6 @@ my ( $template, $borrowernumber, $cookie, $staff_flags ) = get_template_and_user
{ template_name => "admin/aqplan.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { acquisition => 'planning_manage' },
debug => 0,
}

1
admin/audio_alerts.pl
View File

@ -39,7 +39,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/audio_alerts.tt",
query => $cgi,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_audio_alerts' },
debug => 1,
}

1
admin/auth_subfields_structure.pl
View File

@ -61,7 +61,6 @@ my ($template, $borrowernumber, $cookie) = get_template_and_user(
{ template_name => "admin/auth_subfields_structure.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_marc_frameworks' },
debug => 1,
}

1
admin/auth_tag_structure.pl
View File

@ -49,7 +49,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "admin/auth_tag_structure.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 'manage_marc_frameworks'},
debug => 1,
});

1
admin/authorised_values.pl
View File

@ -41,7 +41,6 @@ my @messages;
our ($template, $borrowernumber, $cookie)= get_template_and_user({
template_name => "admin/authorised_values.tt",
authnotrequired => 0,
flagsrequired => {parameters => 'manage_auth_values'},
query => $input,
type => "intranet",

1
admin/authtypes.pl
View File

@ -36,7 +36,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{ template_name => "admin/authtypes.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_marc_frameworks' },
debug => 1,
}

1
admin/biblio_framework.pl
View File

@ -38,7 +38,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{ template_name => "admin/biblio_framework.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_marc_frameworks' },
debug => 1,
}

1
admin/branches.pl
View File

@ -38,7 +38,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{ template_name => "admin/branches.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_libraries' },
debug => 1,
}

1
admin/cash_registers.pl
View File

@ -36,7 +36,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
template_name => 'admin/cash_registers.tt',
query => $cgi,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { admin => 'edit_cash_registers' },
}
);

1
admin/categories.pl
View File

@ -42,7 +42,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/categories.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_patron_categories' },
debug => 1,
}

1
admin/check_budget_parent.pl
View File

@ -40,7 +40,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "acqui/ajax.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
debug => 0,
}
);

1
admin/check_parent_total.pl
View File

@ -46,7 +46,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "acqui/ajax.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
debug => 0,
}
);

1
admin/checkmarc.pl
View File

@ -32,7 +32,6 @@ my ($template, $borrowernumber, $cookie)
= get_template_and_user({template_name => "admin/checkmarc.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_marc_frameworks' },
debug => 1,
});

1
admin/cities.pl
View File

@ -36,7 +36,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "admin/cities.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_cities' },
debug => 1,
}

1
admin/classsources.pl
View File

@ -49,7 +49,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/classsources.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_classifications' },
debug => 1,
}

1
admin/clone-rules.pl
View File

@ -41,7 +41,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "admin/clone-rules.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 'manage_circ_rules'},
debug => 1,
});

1
admin/columns_settings.pl
View File

@ -14,7 +14,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/columns_settings.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_column_config' },
debug => 1,
}

1
admin/currency.pl
View File

@ -39,7 +39,6 @@ our ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => 'admin/currency.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => 'currencies_manage' },
}
);

1
admin/debit_types.pl
View File

@ -38,7 +38,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/debit_types.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'parameters_remaining_permissions' },
debug => 1,
}

1
admin/didyoumean.pl
View File

@ -15,7 +15,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "admin/didyoumean.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 'manage_didyoumean'},
debug => 1,
});

1
admin/edi_accounts.pl
View File

@ -32,7 +32,6 @@ our ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => 'admin/edi_accounts.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => 'edi_manage' },
}
);

1
admin/edi_ean_accounts.pl
View File

@ -30,7 +30,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => 'admin/edi_ean_accounts.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { acquisition => 'edi_manage' },
}
);

1
admin/item_circulation_alerts.pl
View File

@ -43,7 +43,6 @@ sub show {
template_name => "admin/item_circulation_alerts.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'item_circ_alerts' },
debug => defined($input->param('debug')),
}

1
admin/items_search_field.pl
View File

@ -30,7 +30,6 @@ my ($template, $borrowernumber, $cookie) = get_template_and_user({
template_name => 'admin/items_search_field.tt',
query => $cgi,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { parameters => 'manage_item_search_fields' },
});

1
admin/items_search_fields.pl
View File

@ -30,7 +30,6 @@ my ($template, $borrowernumber, $cookie) = get_template_and_user({
template_name => 'admin/items_search_fields.tt',
query => $cgi,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { parameters => 'manage_item_search_fields' },
});

1
admin/itemtypes.pl
View File

@ -45,7 +45,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{ template_name => "admin/itemtypes.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_itemtypes' },
debug => 1,
}

1
admin/koha2marclinks.pl
View File

@ -36,7 +36,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user (
template_name => "admin/koha2marclinks.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_marc_frameworks' },
debug => 1,
}

1
admin/library_groups.pl
View File

@ -34,7 +34,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/library_groups.tt",
query => $cgi,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_libraries' },
debug => 1,
}

1
admin/localization.pl
View File

@ -30,7 +30,6 @@ my $query = new CGI;
my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{ template_name => "admin/localization.tt",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_itemtypes' },
query => $query,
type => "intranet",

1
admin/marc_subfields_structure.pl
View File

@ -74,7 +74,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
template_name => "admin/marc_subfields_structure.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_marc_frameworks' },
debug => 1,
}

1
admin/marctagstructure.pl
View File

@ -52,7 +52,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "admin/marctagstructure.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_marc_frameworks' },
debug => 1,
});

1
admin/matching-rules.pl
View File

@ -37,7 +37,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "admin/matching-rules.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_matching_rules' },
debug => 1,
});

1
admin/oai_set_mappings.pl
View File

@ -44,7 +44,6 @@ my ($template, $loggedinuser, $cookie, $flags) = get_template_and_user( {
template_name => 'admin/oai_set_mappings.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { 'parameters' => 'manage_oai_sets' },
debug => 1,
} );

1
admin/oai_sets.pl
View File

@ -40,7 +40,6 @@ my ($template, $loggedinuser, $cookie, $flags) = get_template_and_user( {
template_name => 'admin/oai_sets.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { 'parameters' => 'manage_oai_sets' },
debug => 1,
} );

1
admin/overdrive.pl
View File

@ -35,7 +35,6 @@ our ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => 'admin/overdrive.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { parameters => 'parameters_remaining_permissions' },
}
);

1
admin/patron-attr-types.pl
View File

@ -44,7 +44,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "admin/patron-attr-types.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_patron_attributes' }
}
);

1
admin/preferences.pl
View File

@ -301,7 +301,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{ template_name => "admin/preferences.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_sysprefs' },
debug => 1,
}

1
admin/searchengine/elasticsearch/mappings.pl
View File

@ -38,7 +38,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
template_name => 'admin/searchengine/elasticsearch/mappings.tt',
query => $input,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { parameters => 'manage_search_engine_config' },
}
);

1
admin/share_content.pl
View File

@ -32,7 +32,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/share_content.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_mana' },
debug => 1,
}

1
admin/smart-rules.pl
View File

@ -45,7 +45,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "admin/smart-rules.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {parameters => 'manage_circ_rules'},
debug => 1,
});

1
admin/sms_providers.pl
View File

@ -35,7 +35,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/sms_providers.tt",
query => $cgi,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_sms_providers' },
debug => 1,
}

1
admin/sru_modmapping.pl
View File

@ -31,7 +31,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( {
template_name => $type eq "authority" ? "admin/sru_modmapping_auth.tt" : "admin/sru_modmapping.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_search_targets' },
});

1
admin/systempreferences.pl
View File

@ -215,7 +215,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{ template_name => "admin/systempreferences.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_sysprefs' },
debug => 1,
}

1
admin/transport-cost-matrix.pl
View File

@ -36,7 +36,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "admin/transport-cost-matrix.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_transfers' },
debug => 1,
});

1
admin/usage_statistics.pl
View File

@ -29,7 +29,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "admin/usage_statistics.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_usage_stats' },
debug => 1,
}

1
admin/z3950servers.pl
View File

@ -44,7 +44,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( {
template_name => "admin/z3950servers.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { parameters => 'manage_search_targets' },
debug => 1,
});

1
authorities/auth_finder.pl
View File

@ -46,7 +46,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
: 'authorities/auth_finder.tt',
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
}
);

3
authorities/authorities-home.pl
View File

@ -54,7 +54,6 @@ if ( $op eq "delete" ) {
template_name => "authorities/authorities-home.tt",
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
debug => 1,
}
@ -105,7 +104,6 @@ if ( $op eq "do_search" ) {
template_name => "authorities/searchresultlist.tt",
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
debug => 1,
}
@ -204,7 +202,6 @@ if ( $op eq '' ) {
template_name => "authorities/authorities-home.tt",
query => $query,
type => 'intranet',
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
debug => 1,
}

1
authorities/authorities.pl
View File

@ -571,7 +571,6 @@ my ($template, $loggedinuser, $cookie)
= get_template_and_user({template_name => "authorities/authorities.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => {editauthorities => 1},
debug => 1,
});

1
authorities/blinddetail-biblio-search.pl
View File

@ -64,7 +64,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "authorities/blinddetail-biblio-search.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { editcatalogue => 'edit_catalogue' },
}
);

1
authorities/detail-biblio-search.pl
View File

@ -67,7 +67,6 @@ my ($template, $loggedinuser, $cookie) = get_template_and_user(
template_name => "authorities/detail-biblio-search.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
debug => 1,
}

1
authorities/detail.pl
View File

@ -174,7 +174,6 @@ my ($template, $loggedinuser, $cookie) = get_template_and_user(
template_name => "authorities/detail.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
debug => 1,
}

1
authorities/export.pl
View File

@ -13,7 +13,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "tools/export.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
debug => 1,
}

1
authorities/merge.pl
View File

@ -40,7 +40,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "authorities/merge.tt",
query => $input,
type => "intranet",
authnotrequired => 0,
flagsrequired => { editauthorities => 1 },
}
);

1
basket/downloadcart.pl
View File

@ -39,7 +39,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user (
template_name => "basket/downloadcart.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
}
);

1
basket/sendbasket.pl
View File

@ -39,7 +39,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user (
template_name => "basket/sendbasketform.tt",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => { catalogue => 1 },
}
);

Some files were not shown because too many files have changed in this diff Show More