Attachment 55802 Details for Bug 17316 – [PASSED QA] Bug 17316: Do not display the list's name if the user does not have permission - OPAC

[patch] [PASSED QA] Bug 17316: Do not display the list's name if the user does not have permission - OPAC

PASSED-QA-Bug-17316-Do-not-display-the-lists-name-.patch (text/plain), 2.20 KB, created by Katrin Fischer on 2016-09-25 16:32:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Katrin Fischer

Created: 2016-09-25 16:32:08 UTC

Size: 2.20 KB

patch

obsolete

>From 0f62264fa4a001828c34a3468fa8318ce747809d Mon Sep 17 00:00:00 2001
>From: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
>Date: Tue, 20 Sep 2016 09:55:25 +0100
>Subject: [PATCH] [PASSED QA] Bug 17316: Do not display the list's name if the
> user does not have permission - OPAC
>MIME-Version: 1.0
>Content-Type: text/plain; charset=UTF-8
>Content-Transfer-Encoding: 8bit
>
>At the OPAC, if a user manipulate the URL to show a list (s)he is not
>allowed to view, the list's name will be displayed anyway.
>
>Test plan:
>- Create a private list with user A
>- Copy the op=view URL and access it with user B logged in
>=> Without this patch, you will see the rss icon, the list's name and
>the "add list" button
>=> Without this patch, only the "unauthorized" box will be displayed
>
>Followed test plan, works as expected.
>Signed-off-by: Marc VÃ©ron <veron@veron.ch>
>
>Signed-off-by: Katrin Fischer  <katrin.fischer@bsz-bw.de>
>---
> koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt | 2 +-
> opac/opac-shelves.pl                                     | 1 +
> 2 files changed, 2 insertions(+), 1 deletion(-)
>
>diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt
>index 4050672..0e20fcf 100644
>--- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt
>+++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt
>@@ -153,7 +153,7 @@
>                     </div>
>                 [% END %]
> 
>-                    [% IF op == 'view' %]
>+                    [% IF shelf AND op == 'view' %]
>                         <h3>
>                             [% shelf.shelfname |html %]
>                             <a href="[% OPACBaseURL %]/cgi-bin/koha/opac-shelves.pl?rss=1&amp;op=view&amp;shelfnumber=[% shelf.shelfnumber %]" class="rss-list-link noprint">
>diff --git a/opac/opac-shelves.pl b/opac/opac-shelves.pl
>index 25120e7..065f517 100755
>--- a/opac/opac-shelves.pl
>+++ b/opac/opac-shelves.pl
>@@ -339,6 +339,7 @@ if ( $op eq 'view' ) {
>             }
>         } else {
>             push @messages, { type => 'error', code => 'unauthorized_on_view' };
>+            undef $shelf;
>         }
>     } else {
>         push @messages, { type => 'error', code => 'does_not_exist' };
>-- 
>2.7.4

Actions: View | Diff | Splinter Review

Attachments on bug 17316: 55707 | 55708 | 55709 | 55710 | 55711 | 55712 | 55802 | 55803