Go to file
Galen Charlton 942271cd9c Bug 7002: fix some invalid superlibrarian permission checks
This patch fixes a problem where if a staff user has superlibrarian
permissions, but also has module-specific permissions, they are
prevent from editing item records that they should be allowed to.

To test:

[1] Turn on IndependentBranches.
[2] Register a superlibrarian staff user at branch A.
[3] Give that new account at least one other module-level
    permission.  This cannot be done through the user interface,
    however, but can be done via SQL:

    UPDATE borrowers SET flags = 3 WHERE userid = 'XXX';

[4] Log in as that new superlibrarian.
[5] Bring up the item details (catalogue/moredetail.pl) page for
    an item at branch B.  Note that there is no 'Edit Item' link.
[6] Similarly, try editing that item (cataloging/additem.pl).  Note
    that the edit form forbids you from touching the item.
[7] Finally, try editing that item using the Tools | Batch item
    modification utility.  Note that it doesn't allow you to do so.
[8] Apply the patch.
[9] Repeat steps 5 through 7.  This time, the item actions should
    be allowed.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Works as described, passes QA script and test suite.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
(cherry picked from commit bb75025364)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2014-08-07 09:48:02 +02:00
C4 Bug 10277: (follow-up) if no userenv is set, act like a superlibrarian 2014-08-07 09:37:39 +02:00
Koha Bug 11148: Add a as_due_date parameter to the output_pref routine 2014-08-06 12:45:39 +02:00
OpenILS Bug 9239 QA follow-up: remove stray debug code 2013-03-16 21:32:34 -04:00
acqui Bug 10277 - Add C4::Context->IsSuperLibrarian() 2014-08-07 09:36:50 +02:00
admin Bug 11508: fix untranslatable pull-down in auth_subfields_structure.pl 2014-08-06 14:29:05 +02:00
authorities Bug 11955: Remove spaces in empty indicators when linking an authority to a biblio record. 2014-08-06 11:59:21 +02:00
basket Bug 10605: fix encoding issue on basket email (INTRANET) 2013-12-24 11:10:14 +01:00
catalogue Bug 7002: fix some invalid superlibrarian permission checks 2014-08-07 09:48:02 +02:00
cataloguing Bug 7002: fix some invalid superlibrarian permission checks 2014-08-07 09:48:02 +02:00
circ Bug 10277 - Add C4::Context->IsSuperLibrarian() 2014-08-07 09:36:50 +02:00
course_reserves Bug 11866: (follow-up) repair security issue introduced by main patch 2014-05-27 14:05:15 +02:00
debian Bug 12234 - changelog updates from 3.14 series 2014-06-03 11:09:17 +02:00
docs Bug 7143: Updating history with new developers 2014-08-06 11:11:03 +02:00
errors Housekeeping in errors scripts 2010-05-12 07:29:03 -04:00
etc Bug 9865 (follow-up) give better usage examples in example SIPconfig.xml 2014-08-01 15:57:29 +02:00
install_misc Bug 11757: remove dependency on POE 2014-05-19 16:03:14 +02:00
installer Bug 12052: DBrev 3.14.09.001 2014-08-06 11:39:45 +02:00
koha-tmpl Bug 11699: fixed saving notes entered when receiving orders 2014-08-06 14:48:55 +02:00
labels Bug 11222: fix crash that can occur in search for items to add to label batch 2013-12-13 09:53:16 +01:00
members Bug 10277 - Add C4::Context->IsSuperLibrarian() 2014-08-07 09:36:50 +02:00
misc Bug 9216: make columns.def file translatable 2014-08-06 14:24:53 +02:00
offline_circ Bug 10240: (follow-up) don't display patrons as lost or gone-no-address incorrectly 2013-10-11 01:57:05 +00:00
opac Bug 11148: Add a as_due_date parameter to the output_pref routine 2014-08-06 12:45:39 +02:00
patron_lists Bug 10565: (follow-up) add new user permission for patron list management 2013-10-14 22:43:03 +00:00
patroncards Bug 10636 - patronimage should have borrowernumber as PK, not cardnumber 2013-10-14 21:08:02 +00:00
plugins Bug 7804 - Add Koha Plugin System - QA Followup 2 2013-03-20 14:50:19 -04:00
reports Bug 11715: require authentication for various staff scripts 2014-06-26 14:08:24 +02:00
reserve Bug 10277 - Add C4::Context->IsSuperLibrarian() 2014-08-07 09:36:50 +02:00
reviews Bug 1623 - Provide view of approved comments 2011-12-27 18:26:50 +01:00
rotating_collections Bug 9605: rotating collections permissions are wrong 2013-03-30 22:11:05 -04:00
selenium
…
serials Bug 10277 - Add C4::Context->IsSuperLibrarian() 2014-08-07 09:36:50 +02:00
services Bug 11715: require authentication for various staff scripts 2014-06-26 14:08:24 +02:00
skel Bug 11078: Add locking to rebuild_zebra 2014-05-27 12:41:28 +02:00
sms Bug 10611: Use mysql_auto_reconnect instead of ping 2014-05-16 12:04:53 +02:00
suggestion Bug 10277 - Add C4::Context->IsSuperLibrarian() 2014-08-07 09:36:50 +02:00
svc Bug 11704: Make */svc/report print the correct headers 2014-05-19 15:51:09 +02:00
t Bug 10277: Add UT for C4::Context::IsSuperLibrarian 2014-08-07 09:37:20 +02:00
tags Bug 10730: Use DataTables on the tag review page 2013-09-25 16:47:59 +00:00
test Bug 5449: JSON malformed in Koha - Blocker with jQuery 1.4.x 2011-03-12 08:53:41 +13:00
tmp/modified_authorities
…
tools Bug 7002: fix some invalid superlibrarian permission checks 2014-08-07 09:48:02 +02:00
virtualshelves Bug 10853: All existing routing to get a CSV should return a MARC csv 2013-10-11 02:16:33 +00:00
xt Bug 12076: better detect an untranslatable template construct 2014-08-06 10:59:18 +02:00
.htaccess Fix file permissions: if it is not a script, it should not be executable. 2010-04-16 00:40:34 -04:00
.mailmap 7439 Mailmap for master 2012-01-27 12:27:58 +01:00
INSTALL Bug 7759, update of install files to use background indexing (and some whitespace tidy) 2012-04-20 16:11:52 +02:00
INSTALL.debian Bug 8092 follow-up: Add optional dependency on CHI 2012-06-09 13:08:18 +02:00
INSTALL.fedora7 Bug 11757: remove dependency on POE 2014-05-19 16:03:14 +02:00
INSTALL.opensuse Bug 11757: remove dependency on POE 2014-05-19 16:03:14 +02:00
INSTALL.ubuntu Bug 7764: (follow-up) editorial tweaks 2013-10-04 16:27:55 +00:00
LICENSE Bug 9440 - update Koha's LICENSE file from GPL2 to GPL3 2013-02-12 08:52:10 -05:00
MANIFEST.SKIP Bug 9546 : Updating make manifest tardist 2013-02-06 23:54:46 -05:00
Makefile.PL Bug 10729: Add phrases configuration for ICU 2014-06-03 11:23:08 +02:00
README Bug 9440 - update Koha's LICENSE file from GPL2 to GPL3 2013-02-12 08:52:10 -05:00
README.robots Bug 6411 add another example to README.robots 2011-07-05 14:48:05 +12:00
about.pl Bug 11772: Show warning on About page:System information if no active currency is defined 2014-06-03 14:35:51 +02:00
changelanguage.pl Bug 6755 Problems with switching languages 2011-09-23 09:47:09 +12:00
edithelp.pl Bug 11661: sanitize file names supplied to edithelp.pl 2014-02-06 19:59:02 +01:00
fix-perl-path.PL
…
help.pl Bug 11238: contruct links to the appropriate manual version dynamically 2013-12-13 09:23:01 +01:00
install-CPAN.pl Bug 5370: Fix all the references to koha.org 2010-11-08 09:41:49 +13:00
koha_perl_deps.pl bug 10548: fix count of missing required dependencies by koha_perl_deps.pl 2013-07-11 14:03:32 +00:00
kohaversion.pl Bug 12052: DBrev 3.14.09.001 2014-08-06 11:39:45 +02:00
mainpage.pl Bug 10080 - Change system pref IndependantBranches to IndependentBranches 2013-05-22 07:58:23 -07:00
rewrite-config.PL Bug 10729: Add phrases configuration for ICU 2014-06-03 11:23:08 +02:00

README

Koha is a free software integrated library system.

Koha is distributed under the GNU GPL version 3 or later.
Please read the file LICENSE for more details.

To install or upgrade Koha, please see the INSTALL file appropriate
to your platform.

Report bugs at http://bugs.koha-community.org/

Visit the Koha Project website at http://www.koha-community.org/