Koha-clms/svc
Marcel de Rooy 83af851c5e Bug 29931: [21.05.x] Check cookie status before continuing
Test plan:
Logout from staff.
Try to run plugins-enable (you should have some active plugin).
Like: https://yourserver:staffport/cgi-bin/koha/plugins/plugins-enable.pl?class=Koha::Plugin::Test&method=enable
Replace class and method as appropriate.
Verify that with this patch, you will be redirected to 401 page.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Bug 29931: (follow-up) Similar thing in opac-patron-image.pl

Although less harmful indeed. No borrowernumber, no image.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Tested: logged in, logged out, prefs toggled. All fine.

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Bug 29931: (follow-up) Fix svc/checkouts and return_claims too

Adding the same auth_status check here too.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Andrew Fuerste-Henry <andrew@bywatersolutions.com>
2022-03-09 15:09:19 +00:00
..
cataloguing Bug 11299: Adjust call to check_cookie_auth 2021-01-14 14:03:49 +01:00
club Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
config Bug 29056: Remove the demo functionality leftovers 2021-10-08 08:01:56 -04:00
hold Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
letters Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
mana Bug 27061: Remove duplicate permission check in svc/mana/search 2021-04-30 17:07:32 +02:00
members Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
records Bug 24663: Force authentication in svc/records/preview (?) 2020-09-03 10:40:35 +02:00
virtualshelves Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
article_request Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
authentication Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
authorised_values Bug 25728: Use a svc script instead of the REST API endpoint 2020-08-24 11:19:03 +02:00
barcode Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
bib Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
bib_framework Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
bib_profile Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkin Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkout_notes Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkouts Bug 29931: [21.05.x] Check cookie status before continuing 2022-03-09 15:09:19 +00:00
convert_report Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
cover_images Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
creator_batches Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
holds Bug 24412: (follow-up) prevent error in svc/holds 2020-11-06 15:55:17 +01:00
import_bib Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
localization Bug 14391: Add granular permissions to the administration module 2018-11-07 12:29:32 +00:00
new_bib Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
problem_reports Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
renew Bug 26457: Throw exception if update of issues table fails 2021-03-01 10:51:15 +01:00
report Bug 27380: Move get_prepped_report to object and use for svc/reports 2021-02-12 12:29:56 +01:00
return_claims Bug 29931: [21.05.x] Check cookie status before continuing 2022-03-09 15:09:19 +00:00
split_callnumbers Bug 26251: Remove unused routines from svc/split_callnumbers 2020-08-20 10:23:56 +02:00