Koha-clms/cataloguing
Galen Charlton 942271cd9c Bug 7002: fix some invalid superlibrarian permission checks
This patch fixes a problem where if a staff user has superlibrarian
permissions, but also has module-specific permissions, they are
prevent from editing item records that they should be allowed to.

To test:

[1] Turn on IndependentBranches.
[2] Register a superlibrarian staff user at branch A.
[3] Give that new account at least one other module-level
    permission.  This cannot be done through the user interface,
    however, but can be done via SQL:

    UPDATE borrowers SET flags = 3 WHERE userid = 'XXX';

[4] Log in as that new superlibrarian.
[5] Bring up the item details (catalogue/moredetail.pl) page for
    an item at branch B.  Note that there is no 'Edit Item' link.
[6] Similarly, try editing that item (cataloging/additem.pl).  Note
    that the edit form forbids you from touching the item.
[7] Finally, try editing that item using the Tools | Batch item
    modification utility.  Note that it doesn't allow you to do so.
[8] Apply the patch.
[9] Repeat steps 5 through 7.  This time, the item actions should
    be allowed.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Works as described, passes QA script and test suite.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
(cherry picked from commit bb75025364)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2014-08-07 09:48:02 +02:00
..
value_builder Bug 8334 - Authority UNIMARC 100 field plugin 2013-12-24 12:58:02 +01:00
addbiblio.pl Bug 10277 - Add C4::Context->IsSuperLibrarian() 2014-08-07 09:36:50 +02:00
addbooks.pl Bug 11410: ensure cataloging search finds results for searches with ampersands 2013-12-30 10:58:58 +01:00
additem.pl Bug 7002: fix some invalid superlibrarian permission checks 2014-08-07 09:48:02 +02:00
linkitem.pl Bug 5528: Analytic records support 2011-10-13 10:03:39 +13:00
merge.pl Bug 9755 QA follow-up: move MARC-specific functionality to utility class 2013-07-23 23:10:21 +00:00
merge_ajax.pl Bug 8860 - can't merge if you don't have fast cataloging permissions 2012-10-05 16:51:32 +02:00
moveitem.pl Bug 10504: Remove the unused C4::Acq::ModOrderItem routine 2013-07-15 16:06:19 +00:00
plugin_launcher.pl Bug 7356 - Fix various typos and mis-spellings 2012-01-13 11:51:26 +01:00
ysearch.pl Bug 8278: build the structure with to_json instead of manually. 2013-05-08 09:49:55 -04:00
z3950_auth_search.pl Bug 11715 : require authentication for the cataloging authorities Z39.50 search 2014-06-26 14:08:15 +02:00
z3950_search.pl Bug 11715: require authentication for the cataloging Z39.50 search 2014-06-26 14:08:06 +02:00