Martin Renvoize 244a214333 Bug 23634: Prevent non-superlibrarians from editing superlibarian emails ... This patchset prevents a non-superlibrarian user from editing a superlibrarians email address via memberentry. This is to prevent a privilege escalation vulnerability whereby a user could update a superlibrarians contact details to match their own and then request a password reset via the OPAC. Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Lucas Gass <lucas@bywatersolutions.com> (cherry picked from commit e4fdbd69722ee33fb0e7125f9a1b316e7f9f8b02)		2020-08-31 20:00:38 +00:00
..
intranet-tmpl	Bug 23634: Prevent non-superlibrarians from editing superlibarian emails	2020-08-31 20:00:38 +00:00
opac-tmpl	Bug 26008: Remove the use of jquery.checkboxes plugin from OPAC cart	2020-08-17 15:18:00 +00:00