Koha-clms/svc
Marcel de Rooy c2e512e4fc Bug 29931: Check cookie status before continuing
Test plan:
Logout from staff.
Try to run plugins-enable (you should have some active plugin).
Like: https://yourserver:staffport/cgi-bin/koha/plugins/plugins-enable.pl?class=Koha::Plugin::Test&method=enable
Replace class and method as appropriate.
Verify that with this patch, you will be redirected to 401 page.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Bug 29931: (follow-up) Similar thing in opac-patron-image.pl

Although less harmful indeed. No borrowernumber, no image.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Tested: logged in, logged out, prefs toggled. All fine.

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Bug 29931: (follow-up) Fix svc/checkouts and return_claims too

Adding the same auth_status check here too.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
2022-03-08 22:50:38 +01:00
..
cataloguing Bug 17515: Order Z3950 server by rank and preserve ordering 2020-11-02 11:03:09 +01:00
club Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
config Bug 29056: Remove the demo functionality leftovers 2021-10-08 16:31:50 -10:00
hold Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
letters Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
mana Bug 27061: Remove duplicate permission check in svc/mana/search 2021-05-11 12:09:40 +02:00
members Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
records Bug 24663: Force authentication in svc/records/preview (?) 2020-09-03 10:40:35 +02:00
virtualshelves Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
article_request Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
authentication Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
authorised_values Bug 25728: Use a svc script instead of the REST API endpoint 2020-08-24 11:19:03 +02:00
barcode Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
bib Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
bib_framework Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
bib_profile Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkin Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkout_notes Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkouts Bug 29931: Check cookie status before continuing 2022-03-08 22:50:38 +01:00
convert_report Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
cover_images Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
creator_batches Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
holds Bug 24412: (follow-up) prevent error in svc/holds 2020-11-06 15:55:17 +01:00
import_bib Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
localization Bug 14391: Add granular permissions to the administration module 2018-11-07 12:29:32 +00:00
new_bib Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
problem_reports Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
renew Bug 26457: Throw exception if update of issues table fails 2021-03-02 08:11:47 +01:00
report Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
return_claims Bug 29931: Check cookie status before continuing 2022-03-08 22:50:38 +01:00
split_callnumbers Bug 26251: Remove unused routines from svc/split_callnumbers 2020-08-20 10:23:56 +02:00