gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 11715: require authentication for various staff scripts 

To test:

[1] Verify that item record creating and editing during the
    acquisitions process continues to work.
[2] Verify that calling  services/itemrecorddisplay.pl without
    a valid user session fails.
[3] Verify that authentication is required for making a new
    order from a suggestion, transferring an order, doing a
    Z39.50 search from acquisitions, displaying the record
    card view in the staff interface, and running the till
    reconciliation report (/cgi-bin/koha/reports/stats.screen.pl)

Signed-off-by: Galen Charlton <gmc@esilibrary.com>

Signed-off-by: Jonathan Druart <jonathan.druart@biblibre.com>
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Verified all changed scripts are not accessible witout a valid
user session, but are with one.

Signed-off-by: Tomas Cohen Arazi <tomascohen@gmail.com>
This commit is contained in:
Galen Charlton 2014-04-29 17:04:02 +00:00 committed by Tomas Cohen Arazi
parent 2b1ffd66bb
commit effb64f7f2
6 changed files with 2 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
acqui/newordersuggestion.pl
View File

@ -119,7 +119,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
template_name => "acqui/newordersuggestion.tmpl",
type => "intranet",
query => $input,
authnotrequired => 1,
flagsrequired => { acquisition => 'order_manage' },
}
);

2
acqui/transferorder.pl
View File

@ -36,9 +36,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
{ template_name => "acqui/transferorder.tmpl",
query => $input,
type => "intranet",
authnotrequired => 1,
flagsrequired => { acquisition => 'order_manage' },
debug => 1,
}
);

1
acqui/z3950_search.pl
View File

@ -70,7 +70,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "acqui/z3950_search.tmpl",
query => $input,
type => "intranet",
authnotrequired => 1,
flagsrequired => { acquisition => 'order_manage' },
}
);

2
reports/stats.screen.pl
View File

@ -39,9 +39,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
template_name => "reports/stats_screen.tmpl",
query => $input,
type => "intranet",
authnotrequired => 1,
flagsrequired => { reports => '*' },
debug => 1,
}
);

5
serials/serial-issues.pl
View File

@ -70,9 +70,7 @@ if ($selectview eq "full"){
= get_template_and_user({template_name => "serials/serial-issues-full.tmpl",
query => $query,
type => "intranet",
authnotrequired => 0,
flagsrequired => {serials => '*'},
debug => 1,
});
# replace CR by <br> in librarian note
@ -94,8 +92,7 @@ if ($selectview eq "full"){
= get_template_and_user({template_name => "serials/serial-issues.tmpl",
query => $query,
type => "intranet",
authnotrequired => 1,
debug => 1,
flagsrequired => {serials => '*'},
});
# replace CR by <br> in librarian note

2
services/itemrecorddisplay.pl
View File

@ -40,7 +40,7 @@ my ($template, $loggedinuser, $cookie, $flags) = get_template_and_user( {
template_name => 'services/itemrecorddisplay.tmpl',
query => $input,
type => 'intranet',
authnotrequired => 1,
flagsrequired => {acquisition => '*'},
} );
my $biblionumber = $input->param('biblionumber') || '';