gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/members
History
Jonathan Druart 2e7bbc6457 Bug 29541: Prevent users from another group to access patron's images 
We should respect group restrictions here.

Test plan:
Create a patron from another group of libraries and don't let them
access info from patrons outside of this group.
Access the following link and confirm that you can see the image only
for patrons from their group
  /cgi-bin/koha/members/patronimage.pl?borrowernumber=XX

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
 		2022-01-31 19:15:44 +01:00
..
accountline-details.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
apikeys.pl Bug 28772: Display API secret once 2021-09-20 20:21:00 -10:00
boraccount.pl Bug 27796: Centralise payment/transaction type handling 2021-04-22 15:51:19 +02:00
cancel-charge.pl Bug 24603: Adjust permissions for cancel-charge.pl 2020-11-10 15:00:14 +01:00
default_messageprefs.pl Bug 18403: Update permissions - borrowers => 1|* becomes borrowers => 'edit_borrowers' 2018-02-12 15:41:37 -03:00
deletemem.pl Bug 27145: Wrap delete and move_to_deleted in a transaction 2021-11-19 14:11:14 -10:00
discharge.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
discharges.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
files.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
guarantor_search.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
holdshistory.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
housebound.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
ill-requests.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
mancredit.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
maninvoice.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
member-flags.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
member-password.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
member.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
memberentry.pl Bug 29524: (bug 28935 follow-up) Restore modification of some patron's attributes 2021-11-25 10:57:36 -10:00
members-home.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
members-update-do.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
members-update.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
merge-patrons.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
mod_debarment.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
moremember.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
notices.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
patronimage.pl Bug 29541: Prevent users from another group to access patron's images 2022-01-31 19:15:44 +01:00
pay.pl Bug 28147: Pass itemnumber through to Account->pay 2021-04-22 16:00:03 +02:00
paycollect.pl Bug 24786: Update paycollect to use session register 2020-11-06 15:39:59 +01:00
print_overdues.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
printfeercpt.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
printinvoice.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
printslip.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
purchase-suggestions.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
readingrec.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
routing-lists.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
setstatus.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
statistics.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
summary-print.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
update-child.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00