From 9028e3d4fd5739a00075b5628950b9acc510af26 Mon Sep 17 00:00:00 2001 From: Liz Rea Date: Thu, 28 Jul 2011 15:59:15 -0500 Subject: [PATCH] Bug 6643 -- Able to download patron card batches as an unauthorized user Making sure permissions are checked on label creator Signed-off-by: Chris Cormack --- patroncards/create-pdf.pl | 11 +++++++++++ 1 files changed, 11 insertions(+), 0 deletions(-) diff --git a/patroncards/create-pdf.pl b/patroncards/create-pdf.pl index f063e9b..961dfbf 100755 --- a/patroncards/create-pdf.pl +++ b/patroncards/create-pdf.pl @@ -21,6 +21,7 @@ use strict; use warnings; use CGI; +use C4::Auth; use Graphics::Magick; use XML::Simple; use POSIX qw(ceil); @@ -34,6 +35,16 @@ use C4::Patroncards 1.000000; my $cgi = new CGI; +my ( $template, $loggedinuser, $cookie ) = get_template_and_user({ + template_name => "labels/label-home.tt", + query => $cgi, + type => "intranet", + authnotrequired => 0, + flagsrequired => { tools => 'label_creator' }, + debug => 1, + }); + + my $batch_id = $cgi->param('batch_id') if $cgi->param('batch_id'); my $template_id = $cgi->param('template_id') || undef; my $layout_id = $cgi->param('layout_id') || undef; -- 1.7.4.1