To recreate: - create a patron with only the catalogue, borrowers, and clubs permissions - log in to the staff client as that patron - navigate to a patron record, confirm you can see the Clubs tab in the patron account, can add patrons to and remove patrons from clubs - confirm you don't have a link to the Tools module either on the Koha homepage or in the More menu - enter the clubs url manually (/cgi-bin/koha/clubs/clubs.pl), confirm you are allowed to open the page We should give a Tools link to anyone with clubs, edit_clubs, or edit_templates permissions.
Created attachment 145707 [details] [review] Bug 26628: Fix access to clubs when user only has clubs permission If a user only has the clubs and no permission from the tools section, they can't access the patron clubs page by navigation. This patch extends the permission checks for tools to include the clubs, that live on the tools page, but have a top level permission. To test: - create a patron with only the catalogue and clubs permissions - log in to the staff client as that patron - navigate to a patron record, confirm you can see the Clubs tab in the patron account, can add patrons to and remove patrons from clubs - confirm you don't have a link to the Tools module either on the Koha homepage or in the More menu - enter the clubs URL manually (/cgi-bin/koha/clubs/clubs.pl), confirm you are allowed to open the page - Apply patch - The only changes should be: - You can now see the Tools entry in the More navigation menu - You can now see the Tools module link on the start page - Both take you to the tools page, only visible tools is 'Patron clubs'
Created attachment 145747 [details] [review] Bug 26628: Fix access to clubs when user only has clubs permission If a user only has the clubs and no permission from the tools section, they can't access the patron clubs page by navigation. This patch extends the permission checks for tools to include the clubs, that live on the tools page, but have a top level permission. To test: - create a patron with only the catalogue and clubs permissions - log in to the staff client as that patron - navigate to a patron record, confirm you can see the Clubs tab in the patron account, can add patrons to and remove patrons from clubs - confirm you don't have a link to the Tools module either on the Koha homepage or in the More menu - enter the clubs URL manually (/cgi-bin/koha/clubs/clubs.pl), confirm you are allowed to open the page - Apply patch - The only changes should be: - You can now see the Tools entry in the More navigation menu - You can now see the Tools module link on the start page - Both take you to the tools page, only visible tools is 'Patron clubs' Signed-off-by: Andrew Fuerste-Henry <andrewfh@dubcolib.org>
Created attachment 145850 [details] [review] Bug 26628: Fix access to clubs when user only has clubs permission If a user only has the clubs and no permission from the tools section, they can't access the patron clubs page by navigation. This patch extends the permission checks for tools to include the clubs, that live on the tools page, but have a top level permission. To test: - create a patron with only the catalogue and clubs permissions - log in to the staff client as that patron - navigate to a patron record, confirm you can see the Clubs tab in the patron account, can add patrons to and remove patrons from clubs - confirm you don't have a link to the Tools module either on the Koha homepage or in the More menu - enter the clubs URL manually (/cgi-bin/koha/clubs/clubs.pl), confirm you are allowed to open the page - Apply patch - The only changes should be: - You can now see the Tools entry in the More navigation menu - You can now see the Tools module link on the start page - Both take you to the tools page, only visible tools is 'Patron clubs' Signed-off-by: Andrew Fuerste-Henry <andrewfh@dubcolib.org> Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Trivial fix, all working as expected. Passing QA, thanks Katrin
Pushed to master for 23.05. Nice work everyone, thanks!
Nice work, thanks everyone! Pushed to 22.11.x for the next release.
Backported to 22.05.x for upcoming 22.05.10
applied to 21.11.x for 21.11.16
Not backported to 21.05.x