Bug 2170 Supplementary Fix Wrap link in permissions check
authorColin Campbell <colin.campbell@ptfs-europe.com>
Mon, 13 Dec 2010 15:31:47 +0000 (15:31 +0000)
committerChris Cormack <chrisc@catalyst.net.nz>
Tue, 14 Dec 2010 00:11:00 +0000 (13:11 +1300)
Found an edit item link not subject to edit_items permission check

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tmpl

index b87e14a..440e652 100644 (file)
     <!-- TMPL_LOOP NAME="ITEM_DATA" -->
     <div class="yui-g">
         <h3 id="item<!-- TMPL_VAR NAME="itemnumber" -->">Barcode <!-- TMPL_VAR NAME="barcode" -->  <!-- TMPL_IF name="notforloantext" --><!-- TMPL_VAR name="notforloantext" --> <!-- /TMPL_IF --></h3>
-        <div class="listgroup"><h4>Item Information <!-- TMPL_IF NAME="CAN_user_editcatalogue_edit_catalogue" --><!-- TMPL_UNLESS name="nomod" --><a href="/cgi-bin/koha/cataloguing/additem.pl?op=edititem&amp;biblionumber=<!-- TMPL_VAR NAME="biblionumber"-->&amp;itemnumber=<!-- TMPL_VAR NAME="itemnumber" -->">[Edit Item]</a><!-- /TMPL_UNLESS --><!-- /TMPL_IF --></h4>
+        <div class="listgroup"><h4>Item Information <!-- TMPL_IF NAME="CAN_user_editcatalogue_edit_catalogue" --><!-- TMPL_UNLESS name="nomod" -->
+         <!-- TMPL_IF NAME="CAN_user_editcatalogue_edit_items" -->
+         <a href="/cgi-bin/koha/cataloguing/additem.pl?op=edititem&amp;biblionumber=<!-- TMPL_VAR NAME="biblionumber"-->&amp;itemnumber=<!-- TMPL_VAR NAME="itemnumber" -->">[Edit Item]</a>
+         <!-- /TMPL_IF -->
+         <!-- /TMPL_UNLESS --><!-- /TMPL_IF --></h4>
             <ol class="bibliodetails">
             <li><span class="label">Home Library:</span> <!-- TMPL_VAR NAME="homebranchname" -->&nbsp;</li>
            <!-- TMPL_IF NAME="item-level_itypes" -->