fe386c1724
If a librarian has edit_subscription but not create_subscription :
When trying to edit a subscription, after saving permission is denied.
This is because permissions in serials/subscription-add.pl depends on arg 'op' and on edit this arg starts with 'modify' but changes to 'modsubscription' when saving.
Test plan :
- Create a user with staff access
- Define its permissions on serials : only edit_subscription
- Edit a subscription
- Click 'Next'
- Click 'Test prediction pattern'
- Click 'Save subscription'
=> Without patch you get to page serials/subscription-add.pl with permission denied
=> With patch subscription is saved and you get to subscription details page
Signed-off-by: Caroline Cyr La Rose <caroline.cyr-la-rose@inlibro.com>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| acqui-search-result.pl | ||
| acqui-search.pl | ||
| add_fields.pl | ||
| add_user_search.pl | ||
| checkexpiration.pl | ||
| claims.pl | ||
| create-numberpattern.pl | ||
| lateissues-export.pl | ||
| reorder_members.pl | ||
| routing-preview.pl | ||
| routing.pl | ||
| serial-issues.pl | ||
| serials-collection.pl | ||
| serials-edit.pl | ||
| serials-home.pl | ||
| serials-search.pl | ||
| showpredictionpattern.pl | ||
| subscription-add.pl | ||
| subscription-bib-search.pl | ||
| subscription-detail.pl | ||
| subscription-frequencies.pl | ||
| subscription-frequency.pl | ||
| subscription-history.pl | ||
| subscription-numberpattern.pl | ||
| subscription-numberpatterns.pl | ||
| subscription-renew.pl | ||
| viewalerts.pl | ||