Bugzilla – Attachment 129333 Details for
Bug 29541
Patron images can be accessed with just 'catalogue' permission
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 29541: Restrict access to patron's image to borrowers => * and circulate => *
Bug-29541-Restrict-access-to-patrons-image-to-borr.patch (text/plain), 1.09 KB, created by
Tomás Cohen Arazi (tcohen)
on 2022-01-12 12:08:33 UTC
(
hide
)
Description:
Bug 29541: Restrict access to patron's image to borrowers => * and circulate => *
Filename:
MIME Type:
Creator:
Tomás Cohen Arazi (tcohen)
Created:
2022-01-12 12:08:33 UTC
Size:
1.09 KB
patch
obsolete
>From 01508deafc70887fc9d669834b0ef85eb1a2ee3b Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Mon, 22 Nov 2021 15:29:58 +0100 >Subject: [PATCH] Bug 29541: Restrict access to patron's image to borrowers => > * and circulate => * > >The patron images is displayed on the 'circulation' and 'members' >modules. > >Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> >Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> >--- > members/patronimage.pl | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >diff --git a/members/patronimage.pl b/members/patronimage.pl >index da62b87553..c4a6e5eb40 100755 >--- a/members/patronimage.pl >+++ b/members/patronimage.pl >@@ -47,7 +47,7 @@ This script, when called from within HTML and passed a valid patron borrowernumb > > =cut > >-my ($status, $cookie, $sessionID) = check_api_auth($query, { catalogue => 1 } ); >+my ($status, $cookie, $sessionID) = check_api_auth($query, [ { borrowers => '*' }, { circulate => '*' } ] ); > > unless ( $status eq 'ok' ) { > print $query->header(-type => 'text/plain', -status => '403 Forbidden'); >-- >2.32.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 29541
:
127932
|
128276
|
128801
|
128802
| 129333 |
129334