|
Lines 59-64
use CGI;
Link Here
|
| 59 |
use C4::Dates qw/format_date/; |
59 |
use C4::Dates qw/format_date/; |
| 60 |
use C4::Bookseller qw/ GetBookSellerFromId GetBookSeller /; |
60 |
use C4::Bookseller qw/ GetBookSellerFromId GetBookSeller /; |
| 61 |
use C4::Members qw/GetMember/; |
61 |
use C4::Members qw/GetMember/; |
|
|
62 |
use C4::Context; |
| 62 |
|
63 |
|
| 63 |
my $query = CGI->new; |
64 |
my $query = CGI->new; |
| 64 |
my ( $template, $loggedinuser, $cookie ) = get_template_and_user( |
65 |
my ( $template, $loggedinuser, $cookie ) = get_template_and_user( |
|
Lines 95-100
if ($loggedinuser) {
Link Here
|
| 95 |
$uid = GetMember( borrowernumber => $loggedinuser )->{userid}; |
96 |
$uid = GetMember( borrowernumber => $loggedinuser )->{userid}; |
| 96 |
} |
97 |
} |
| 97 |
|
98 |
|
|
|
99 |
my $userenv = C4::Context::userenv; |
| 100 |
my $viewbaskets = C4::Context->preference('AcqViewBaskets'); |
| 101 |
|
| 102 |
my $userbranch = $userenv->{branch}; |
| 103 |
|
| 98 |
#build result page |
104 |
#build result page |
| 99 |
my $loop_suppliers = []; |
105 |
my $loop_suppliers = []; |
| 100 |
|
106 |
|
|
Lines 102-120
for my $vendor (@suppliers) {
Link Here
|
| 102 |
my $baskets = get_vendors_baskets( $vendor->{id} ); |
108 |
my $baskets = get_vendors_baskets( $vendor->{id} ); |
| 103 |
|
109 |
|
| 104 |
my $loop_basket = []; |
110 |
my $loop_basket = []; |
|
|
111 |
|
| 105 |
for my $basket ( @{$baskets} ) { |
112 |
for my $basket ( @{$baskets} ) { |
| 106 |
if (( $basket->{authorisedby} |
113 |
my $authorisedby = $basket->{authorisedby}; |
| 107 |
&& $basket->{authorisedby} eq $loggedinuser |
114 |
my $basketbranch = GetMember( borrowernumber => $authorisedby )->{branchcode}; |
| 108 |
) |
115 |
|
| 109 |
|| haspermission( $uid, { acquisition => q{*} } ) |
116 |
if ($userenv->{'flags'} & 1 || #user is superlibrarian |
| 110 |
) { |
117 |
(haspermission( $uid, { acquisition => q{*} } ) && #user has acq permissions and |
|
|
118 |
($viewbaskets eq 'all' || #user is allowed to see all baskets |
| 119 |
($viewbaskets eq 'branch' && $authorisedby && $userbranch eq $basketbranch) || #basket belongs to user's branch |
| 120 |
($basket->{authorisedby} && $viewbaskets == 'user' && $authorisedby == $loggedinuser) #user created this basket |
| 121 |
) |
| 122 |
) |
| 123 |
) { |
| 111 |
for my $date_field (qw( creationdate closedate)) { |
124 |
for my $date_field (qw( creationdate closedate)) { |
| 112 |
if ( $basket->{$date_field} ) { |
125 |
if ( $basket->{$date_field} ) { |
| 113 |
$basket->{$date_field} = |
126 |
$basket->{$date_field} = format_date( $basket->{$date_field} ); |
| 114 |
format_date( $basket->{$date_field} ); |
|
|
| 115 |
} |
127 |
} |
| 116 |
} |
128 |
} |
| 117 |
push @{$loop_basket}, $basket; |
129 |
push @{$loop_basket}, $basket; |
| 118 |
} |
130 |
} |
| 119 |
} |
131 |
} |
| 120 |
|
132 |
|