Koha-clms/catalogue
Galen Charlton 942271cd9c Bug 7002: fix some invalid superlibrarian permission checks
This patch fixes a problem where if a staff user has superlibrarian
permissions, but also has module-specific permissions, they are
prevent from editing item records that they should be allowed to.

To test:

[1] Turn on IndependentBranches.
[2] Register a superlibrarian staff user at branch A.
[3] Give that new account at least one other module-level
    permission.  This cannot be done through the user interface,
    however, but can be done via SQL:

    UPDATE borrowers SET flags = 3 WHERE userid = 'XXX';

[4] Log in as that new superlibrarian.
[5] Bring up the item details (catalogue/moredetail.pl) page for
    an item at branch B.  Note that there is no 'Edit Item' link.
[6] Similarly, try editing that item (cataloging/additem.pl).  Note
    that the edit form forbids you from touching the item.
[7] Finally, try editing that item using the Tools | Batch item
    modification utility.  Note that it doesn't allow you to do so.
[8] Apply the patch.
[9] Repeat steps 5 through 7.  This time, the item actions should
    be allowed.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Works as described, passes QA script and test suite.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
(cherry picked from commit bb75025364)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2014-08-07 09:48:02 +02:00
..
ISBDdetail.pl Bug 11829: fix JavaScript error on staff client biblio details pages if template variables are undefined 2014-05-27 12:22:12 +02:00
MARCdetail.pl Bug 11885: (follow-up) remove tabs 2014-08-06 09:50:56 +02:00
cardview.pl
…
detail.pl Bug 9823: QA follow-up for GetReservesFromBiblionumber calls 2014-05-27 12:17:57 +02:00
export.pl Bug 9665: QA follow up fixing tabs 2013-06-17 11:25:40 -07:00
getitem-ajax.pl Bug 7175: Allow to choose which items to receive 2012-05-21 17:46:07 +02:00
image.pl Bug 8255: allow local cover images to be cached 2012-06-25 18:12:29 +02:00
imageviewer.pl Bug 11829: fix JavaScript error on staff client biblio details pages if template variables are undefined 2014-05-27 12:22:12 +02:00
issuehistory.pl Bug 10868 - Use new DataTables include in catalog templates 2013-09-21 19:27:08 +00:00
labeledMARCdetail.pl Bug 11829: fix JavaScript error on staff client biblio details pages if template variables are undefined 2014-05-27 12:22:12 +02:00
moredetail.pl Bug 7002: fix some invalid superlibrarian permission checks 2014-08-07 09:48:02 +02:00
search.pl Bug 11369: (follow-up) generate searchid in browser.js 2014-05-07 18:33:23 +02:00
showmarc.pl Bug 11329: Check for MARC record existence in catalogue/showmarc 2014-03-25 12:17:09 +01:00
updateitem.pl Bug 7639: add option to forgive overdue fines when declaring items lost 2013-09-17 15:10:46 +00:00