Bug 27716: Update permissions for patroncards creator
authorMartin Renvoize <martin.renvoize@ptfs-europe.com>
Fri, 19 Feb 2021 10:12:32 +0000 (10:12 +0000)
committerJonathan Druart <jonathan.druart@bugs.koha-community.org>
Tue, 16 Mar 2021 15:08:30 +0000 (16:08 +0100)
commitbc5decc913b34468b1355925dc8ba260b060365c
tree5d5825df4d616411399d2cf62ad6256acac3c8ac
parent260b0ccdc71bfd02908e623e6931843ac3caaae0
Bug 27716: Update permissions for patroncards creator

The various subpages of the label creator tool we're under the
'catalogue' permission. There is however a 'label_creator' subpermission
of tools which is more appropriate.

Test plan
1/ Setup a user with just the 'catelogue' permission (to enable logging
into the staff interface)
2/ With the patch applied you should not be able to access the following
pages (either via navigation in the UI or by typing them into the
browser address bar directly)
  - /patroncards/add_user_search.pl
  - /patroncards/edit-batch.pl
  - /patroncards/edit-layout.pl
  - /patroncards/edit-profile.pl
  - /patroncards/edit-template.pl
  - /patroncards/home.pl
  - /patroncards/image-manage.pl
  - /patroncards/manage.pl
  - /patroncards/print.pl
3/ Signoff

Signed-off-by: Owen Leonard <oleonard@myacpl.org>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
patroncards/add_user_search.pl
patroncards/edit-batch.pl
patroncards/edit-layout.pl
patroncards/edit-profile.pl
patroncards/edit-template.pl
patroncards/home.pl
patroncards/image-manage.pl
patroncards/manage.pl
patroncards/print.pl