Jonathan Druart 9a65da00e4 Bug 29543: Prevent user to checkin or renew items they don't own ... Checkin or renew must be restricted to the items they own. Test plan: Create an item with barcode bc_1 Check it in to user A Login to SCO with user B Get the token using the browser dev tool, from the cookie Hit (replace $JWT) /cgi-bin/koha/sco/sco-main.pl?jwt=$JWT&op=renew&barcode=bc_1 /cgi-bin/koha/sco/sco-main.pl?jwt=$JWT&op=returnbook&barcode=bc_1 You should see an error message Signed-off-by: Nick Clemens <nick@bywatersolutions.com> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com> (cherry picked from commit 839b7c4a5c) Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net> (cherry picked from commit 1c8988377bbd7749a83c9d695419e1ac6f53441e) Signed-off-by: Andrew Fuerste-Henry <andrew@bywatersolutions.com>		2022-01-25 21:00:18 +00:00
..
help.pl	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
printslip.pl	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
sco-main.pl	Bug 29543: Prevent user to checkin or renew items they don't own	2022-01-25 21:00:18 +00:00
sco-patron-image.pl	Bug 22943: Renames the in_ipset function to in_iprange in C4::Auth	2020-03-16 11:00:21 +00:00