# requires that the session cookie already
# has been created.
-my $flags_required = [
- {circulate => 'circulate_remaining_permissions'},
- {tools => 'stage_marc_import'},
- {tools => 'upload_local_cover_images'}
-];
-
my %cookies = CGI::Cookie->fetch;
my $sid = $cookies{'CGISESSID'}->value;
-
-my $auth_failure = 1;
my ( $auth_status, $sessionID ) = check_cookie_auth( $sid );
my $uid = C4::Auth::get_session($sid)->param('id');
-foreach my $flag_required ( @{$flags_required} ) {
- if ( my $flags = haspermission( $uid, $flag_required ) ) {
- $auth_failure = 0 if $auth_status eq 'ok';
- }
-}
+my $allowed = Koha::Upload->allows_add_by( $uid );
-if ($auth_failure) {
+if( $auth_status ne 'ok' || !$allowed ) {
send_reply( 'denied' );
exit 0;
}