Bug 27716: Update permissions for patroncards creator
authorMartin Renvoize <martin.renvoize@ptfs-europe.com>
Fri, 19 Feb 2021 10:12:32 +0000 (10:12 +0000)
committerJonathan Druart <jonathan.druart@bugs.koha-community.org>
Tue, 16 Mar 2021 15:08:30 +0000 (16:08 +0100)
The various subpages of the label creator tool we're under the
'catalogue' permission. There is however a 'label_creator' subpermission
of tools which is more appropriate.

Test plan
1/ Setup a user with just the 'catelogue' permission (to enable logging
into the staff interface)
2/ With the patch applied you should not be able to access the following
pages (either via navigation in the UI or by typing them into the
browser address bar directly)
  - /patroncards/add_user_search.pl
  - /patroncards/edit-batch.pl
  - /patroncards/edit-layout.pl
  - /patroncards/edit-profile.pl
  - /patroncards/edit-template.pl
  - /patroncards/home.pl
  - /patroncards/image-manage.pl
  - /patroncards/manage.pl
  - /patroncards/print.pl
3/ Signoff

Signed-off-by: Owen Leonard <oleonard@myacpl.org>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
patroncards/add_user_search.pl
patroncards/edit-batch.pl
patroncards/edit-layout.pl
patroncards/edit-profile.pl
patroncards/edit-template.pl
patroncards/home.pl
patroncards/image-manage.pl
patroncards/manage.pl
patroncards/print.pl

index 5c250e8..b01cf6a 100755 (executable)
@@ -34,7 +34,7 @@ my ( $template, $loggedinuser, $cookie, $staff_flags ) = get_template_and_user(
     {   template_name   => "common/patron_search.tt",
         query           => $input,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
     }
 );
 
index 992c58a..e00b011 100755 (executable)
@@ -37,7 +37,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
         template_name   => "patroncards/edit-batch.tt",
         query           => $cgi,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
         debug           => 1,
     }
 );
index 8e415af..b50c221 100755 (executable)
@@ -36,7 +36,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
         template_name   => "patroncards/edit-layout.tt",
         query           => $cgi,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
         debug           => 1,
     }
 );
index e5ceb08..7ca0e70 100755 (executable)
@@ -33,7 +33,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
         template_name   => "patroncards/edit-profile.tt",
         query           => $cgi,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
         debug           => 1,
     }
 );
index cce2a8f..6ec791a 100755 (executable)
@@ -34,7 +34,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
         template_name   => "patroncards/edit-template.tt",
         query           => $cgi,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
         debug           => 1,
     }
 );
index 7bb2bc4..884f487 100755 (executable)
@@ -31,7 +31,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
         template_name   => "patroncards/home.tt",
         query           => $cgi,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
         debug           => 1,
     }
 );
index e3e38b9..388f2af 100755 (executable)
@@ -19,7 +19,7 @@ my ($template, $loggedinuser, $cookie) = get_template_and_user({
                     template_name       => "patroncards/image-manage.tt",
                     query               => $cgi,
                     type                => "intranet",
-                    flagsrequired       => {tools => 'batch_upload_patron_images'}, # FIXME: establish flag for patron card creator
+                    flagsrequired       => {tools => 'label_creator'},
                     debug               => 0,
                     });
 
index 4ea36eb..62d0ee7 100755 (executable)
@@ -37,7 +37,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
         template_name   => "patroncards/manage.tt",
         query           => $cgi,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
         debug           => 1,
     }
 );
index 60cff0e..0338282 100755 (executable)
@@ -33,7 +33,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
         template_name   => "patroncards/print.tt",
         query           => $cgi,
         type            => "intranet",
-        flagsrequired   => { catalogue => 1 },
+        flagsrequired   => { tools => 'label_creator' },
         debug           => 1,
     }
 );