|
Lines 18-24
package Koha::Virtualshelf;
Link Here
|
| 18 |
use Modern::Perl; |
18 |
use Modern::Perl; |
| 19 |
|
19 |
|
| 20 |
|
20 |
|
| 21 |
use C4::Auth qw( haspermission ); |
21 |
use C4::Auth; |
| 22 |
|
22 |
|
| 23 |
use Koha::Patrons; |
23 |
use Koha::Patrons; |
| 24 |
use Koha::Database; |
24 |
use Koha::Database; |
|
Lines 234-240
sub can_be_deleted {
Link Here
|
| 234 |
|
234 |
|
| 235 |
my $patron = Koha::Patrons->find( $borrowernumber ) or return 0; |
235 |
my $patron = Koha::Patrons->find( $borrowernumber ) or return 0; |
| 236 |
|
236 |
|
| 237 |
return 1 if $self->is_public and haspermission( $patron->userid, { lists => 'delete_public_lists' } ); |
237 |
return 1 if $self->is_public and C4::Auth::haspermission( $patron->userid, { lists => 'delete_public_lists' } ); |
| 238 |
|
238 |
|
| 239 |
return 0; |
239 |
return 0; |
| 240 |
} |
240 |
} |
|
Lines 246-252
sub can_be_managed {
Link Here
|
| 246 |
|
246 |
|
| 247 |
my $patron = Koha::Patrons->find( $borrowernumber ) or return 0; |
247 |
my $patron = Koha::Patrons->find( $borrowernumber ) or return 0; |
| 248 |
return 1 |
248 |
return 1 |
| 249 |
if $self->is_public and haspermission( $patron->userid, { lists => 'edit_public_lists' } ); |
249 |
if $self->is_public and C4::Auth::haspermission( $patron->userid, { lists => 'edit_public_lists' } ); |
| 250 |
return 0; |
250 |
return 0; |
| 251 |
} |
251 |
} |
| 252 |
|
252 |
|
|
Lines 311-317
sub cannot_be_transferred {
Link Here
|
| 311 |
if( $self->public ) { |
311 |
if( $self->public ) { |
| 312 |
my $by_patron = Koha::Patrons->find($by); |
312 |
my $by_patron = Koha::Patrons->find($by); |
| 313 |
return 'unauthorized_transfer' |
313 |
return 'unauthorized_transfer' |
| 314 |
if !$by_patron || !haspermission( $by_patron->userid, { lists => 'edit_public_lists' }); |
314 |
if !$by_patron || !C4::Auth::haspermission( $by_patron->userid, { lists => 'edit_public_lists' }); |
| 315 |
} else { |
315 |
} else { |
| 316 |
return 'unauthorized_transfer' if !$self->can_be_managed($by); |
316 |
return 'unauthorized_transfer' if !$self->can_be_managed($by); |
| 317 |
} |
317 |
} |
| 318 |
- |
|
|