Koha-clms/catalogue
Jonathan Druart 73759312d2 Bug 14449: Add authentication check on retrieving item info when receiving
The script catalogue/getitem-ajax.pl is called by acqui/orderreceive.pl
when item is receipt.
There is not auth check done, this means anybody can retrieve item info.

Test plan:
With the acquisition => order_receive permission, try to receive an
item.
It should work.

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Very easy to test.

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
(cherry picked from commit ea263a2284)
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
2015-07-21 15:56:22 +12:00
..
ISBDdetail.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
MARCdetail.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
detail.pl Bug 5010: Fix OPACBaseURL to include protocol 2015-06-07 19:47:49 +12:00
export.pl Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
getitem-ajax.pl Bug 14449: Add authentication check on retrieving item info when receiving 2015-07-21 15:56:22 +12:00
image.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
imageviewer.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
issuehistory.pl Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:43 -03:00
itemsearch.pl Bug 13950: Sort Item search home library list by branch name 2015-07-15 08:08:23 +12:00
labeledMARCdetail.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
moredetail.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
search-history.pl Bug 11430: Intranet changes 2015-03-11 15:02:42 -03:00
search.pl Bug 14431: FIX encoding issues in search (staff client) 2015-07-14 11:42:29 +12:00
showmarc.pl Bug 6520: Display items for staged record 2015-04-16 13:40:46 -03:00
updateitem.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00