From 76ddc1330ddf873c858b437021a6cc3aa8e83d4c Mon Sep 17 00:00:00 2001 From: Fridolyn SOMERS Date: Wed, 27 Feb 2013 11:16:24 +0100 Subject: [PATCH] Bug 7018 : need all acq permissions to search All acquisition module permissions are needed to allow order search (acqui/histsearch.pl). With this patch any acquisition permission allows to order search. Many other pages of this module have this behavior. Test plan : - Set for a user only one permission in acquisition module (not order_receive) - Login with this user and try to perform an order search => you get access to page - Set for a user no permission in acquisition module - Login with this user and try to perform an order search => you do not get access to page --- acqui/histsearch.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/acqui/histsearch.pl b/acqui/histsearch.pl index 1ffbffe..971fc18 100755 --- a/acqui/histsearch.pl +++ b/acqui/histsearch.pl @@ -83,7 +83,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( query => $input, type => "intranet", authnotrequired => 0, - flagsrequired => { acquisition => 'group_manage', acquisition => 'order_manage', acquisition => 'order_receive' }, + flagsrequired => { acquisition => '*' }, debug => 1, } ); -- 1.7.10.4