Bug 31643: Require only edit_catalogue, not full cataloging
authorNick Clemens <nick@bywatersolutions.com>
Wed, 28 Sep 2022 18:59:41 +0000 (18:59 +0000)
committerArthur Suzuki <arthur.suzuki@biblibre.com>
Wed, 14 Dec 2022 11:59:17 +0000 (12:59 +0100)
To test:
1 - Grant a patron: catalogue, edit_catalogue, and editauthorities permissions
2 - Log in to staff client
3 - Browse to: http://localhost:8081/cgi-bin/koha/svc/cataloguing/automatic_linker.pl
4 - UNAUTHORIZED
5 - Apply patch, restart all
6 - Log in and go to link again
7 - status "OK"

Signed-off-by: Catrina <catrina@bywatersolutions.com>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
(cherry picked from commit fb1ca3311001b0a7c5b93a54330a9206ff5b41d9)

Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
(cherry picked from commit e3db0a35c38359a0a92f9eb81a29b2371aebb6e6)
Signed-off-by: Arthur Suzuki <arthur.suzuki@biblibre.com>
svc/cataloguing/automatic_linker.pl

index 17159d9..228e01f 100755 (executable)
@@ -29,7 +29,10 @@ print $input->header('application/json');
 
 # Check the user's permissions
 my ( $auth_status ) =
-  C4::Auth::check_cookie_auth( $input->cookie('CGISESSID'), { editauthorities => 1, editcatalogue => 1 } );
+  C4::Auth::check_cookie_auth( $input->cookie('CGISESSID'), {
+    editauthorities => 1,
+    editcatalogue => 'edit_catalogue'
+  });
 if ( $auth_status ne "ok" ) {
     print to_json( { status => 'UNAUTHORIZED' } );
     exit 0;