gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/members
History
Jonathan Druart 9cfe32aaad Bug 29541: Prevent users from another group to access patron's images 
We should respect group restrictions here.

Test plan:
Create a patron from another group of libraries and don't let them
access info from patrons outside of this group.
Access the following link and confirm that you can see the image only
for patrons from their group
  /cgi-bin/koha/members/patronimage.pl?borrowernumber=XX

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
(cherry picked from commit 09cb5e02e6fad7b0dd3137d925646d714444a704)

Signed-off-by: Andrew Fuerste-Henry <andrew@bywatersolutions.com>
 		2022-01-26 20:01:17 +00:00
..
accountline-details.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
apikeys.pl Bug 28772: Display API secret once 2021-09-15 10:47:11 -04:00
boraccount.pl Bug 27971: Update void method to use double entry accounting 2021-04-23 11:58:49 +02:00
cancel-charge.pl Bug 29457: Pass context borrowernumber 2022-01-10 14:29:33 +00:00
default_messageprefs.pl Bug 18403: Update permissions - borrowers => 1|* becomes borrowers => 'edit_borrowers' 2018-02-12 15:41:37 -03:00
deletemem.pl Bug 27145: Wrap delete and move_to_deleted in a transaction 2021-11-19 11:34:58 -05:00
discharge.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
discharges.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
files.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
guarantor_search.pl Bug 23271: Replace search_limited with search_with_library_limits 2021-04-21 15:25:07 +02:00
holdshistory.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
housebound.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
ill-requests.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
mancredit.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
maninvoice.pl Bug 26760: Escape URI parameters in redirect URI to paycollect.pl 2021-07-16 08:40:17 -04:00
member-flags.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
member-password.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
member.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
memberentry.pl Bug 29524: (bug 28935 follow-up) Restore modification of some patron's attributes 2021-11-24 05:53:30 -05:00
members-home.pl Bug 23271: Replace search_limited with search_with_library_limits 2021-04-21 15:25:07 +02:00
members-update-do.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
members-update.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
merge-patrons.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
mod_debarment.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
moremember.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
notices.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
patronimage.pl Bug 29541: Prevent users from another group to access patron's images 2022-01-26 20:01:17 +00:00
pay.pl Bug 28147: Pass itemnumber through to Account->pay 2021-04-16 12:28:17 +02:00
paycollect.pl Bug 24786: Update paycollect to use session register 2020-11-06 15:39:59 +01:00
print_overdues.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
printfeercpt.pl Bug 26734: Convert printfeercpt/printinvoice to use GetPreparedLetter 2021-04-27 16:23:49 +02:00
printinvoice.pl Bug 26734: Convert printfeercpt/printinvoice to use GetPreparedLetter 2021-04-27 16:23:49 +02:00
printslip.pl Bug 29062: Use primary key issued_id to fetch old_issues for letters 2021-10-08 11:15:51 -04:00
purchase-suggestions.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
readingrec.pl Bug 27851: Use filter_by_todays_checkins in members/readingrec.pl 2021-03-05 13:54:13 +01:00
routing-lists.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
setstatus.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
statistics.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
summary-print.pl Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
update-child.pl Bug 23271: Replace search_limited with search_with_library_limits 2021-04-21 15:25:07 +02:00