gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/acqui
History
Fridolin Somers 92ad0ac7ba Bug 14440: get_template_and_user can not have an empty template_name (updatesupplier.pl) 
Since Bug 14408, the method get_template_and_user can not have an empty template_name.
Pages calling with an empty value should use C4::Auth::checkauth()

This patch corrects acqui/updatesupplier.pl

Test plan :
- Apply patch
- Connect to intranet with a user having "vendors_manage" permission
- Go to acquisition module
- Create a new vendor
- Click on "Edit vendor"
- Change some information and save
=> Your change is saved
- Connect to intranet with a user not having "vendors_manage" permission
- Try to access <intranet>/cgi-bin/koha/acqui/updatesupplier.pl
=> Access is denied
- Disconnect from intranet
- Try to access <intranet>/cgi-bin/koha/acqui/updatesupplier.pl
=> Access is denied

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Mason James <mtj@kohaaloha.com>
 		2015-07-26 01:20:06 +12:00
..
pdfformat Bug 11856: Add publication year and edition to French acq PDF template 2014-04-28 17:20:14 +00:00
acqui-home.pl Bug 10792: fix sorting of funds table on acquisitions home page 2013-09-16 15:30:33 +00:00
addorder.pl Bug 9822: Alert on adding an order to a basket if budget s exceeded 2013-10-30 15:10:11 +00:00
addorderiso2709.pl Bug 9063: rename num_biblios to num_records in addorderiso2709.{pl,tt} 2014-05-06 14:36:19 +00:00
ajax-getauthvaluedropbox.pl Bug 766: (follow-up) point acqui/ajax-getauthvaluedropbox.pl at the new location of GetAuthvalueDropbox 2014-05-04 23:11:31 +00:00
aqbasketuser_search.pl Bug 7295: More granular permissions for baskets 2013-10-31 16:35:35 +00:00
basket.pl Bug 11433: (code cleanup) remove unused 'attachbasket' op value in basket.pl 2014-05-07 15:19:21 +00:00
basketgroup.pl Bug 11856: Add publication year and edition to English acq PDF templates 2014-04-28 17:19:31 +00:00
basketheader.pl Bug 9364: fixes billing/delivery addresses for new baskets 2013-01-18 19:15:24 -05:00
booksellers.pl Bug 11171: Display basket group name on the supplier list page 2013-11-27 18:02:21 +00:00
check_budget_total.pl
…
check_duplicate_barcode_ajax.pl Bug 6963: Corrects a problem when a new order is created with a duplicate barcode. 2011-11-04 10:22:28 +01:00
check_uniqueness.pl Bug 10483: fix item uniqueness check on order form 2013-08-14 21:17:11 +00:00
currency.pl
…
finishreceive.pl Bug 12111: (follow-up) ensure that vendor note is not editable during order receiving 2014-04-28 15:37:43 +00:00
histsearch.pl Bug 11551: Allow to search on parent ordernumber in histsearch.pl 2014-04-21 04:23:09 +00:00
invoice.pl Bug 12619 - Shipment date gets lost on finishing and/or editing the invoice 2014-09-23 04:59:02 +00:00
invoices.pl Bug 10401: Add ability to merge invoices 2013-10-21 19:08:03 +00:00
lateorders-export.pl Bug 7298: (follow-up) various QA fixes 2013-10-31 15:51:25 +00:00
lateorders.pl Bug 7298: (follow-up) fix uninitialized variable warning 2013-10-31 15:52:47 +00:00
modordernotes.pl Bug 9416: add new order vendor note field 2014-04-19 15:55:36 +00:00
neworderbiblio.pl Bug 12323 [SIGNED OFF] - Acquisitions search results fixed in order of biblionumber 2015-02-26 17:41:19 +13:00
neworderempty.pl Bug 7180: make neworderempty code use getAuthValueDropbox. 2014-05-04 19:49:20 +00:00
newordersubscription.pl Bug 9508: Standardize the dateformat value from C4::Auth 2013-05-20 09:05:01 -07:00
newordersuggestion.pl Bug 11715: require authentication for various staff scripts 2014-06-25 22:43:20 +00:00
ordered.pl Bug 7735: removal of C4::Dates when unused 2012-03-20 18:11:04 +01:00
orderreceive.pl Bug 9416: add new order vendor note field 2014-04-19 15:55:36 +00:00
parcel.pl Bug 11170: make the pending order list only display orders to receive 2014-03-11 15:09:56 +00:00
parcels.pl Bug 12089: Remove use of dt_add_type_uk_date() - Acquisitions 2014-04-28 18:41:28 +00:00
spent.pl Bug 9987: Remove DB field aqorders.biblioitemnunmber 2013-07-02 15:18:50 -07:00
supplier.pl Bug 11680: (follow-up) fix unexpected tax rate changes on edit 2014-04-18 22:14:21 +00:00
transferorder.pl Bug 11715: require authentication for various staff scripts 2014-06-25 22:43:20 +00:00
uncertainprice.pl Bug 10723: Merge GetPendingOrders and SearchOrders routines 2013-10-21 18:24:32 +00:00
updatesupplier.pl Bug 14440: get_template_and_user can not have an empty template_name (updatesupplier.pl) 2015-07-26 01:20:06 +12:00
z3950_search.pl Bug 11715: require authentication for various staff scripts 2014-06-25 22:43:20 +00:00