Attachment 78275 Details for Bug 15520 – Bug 15520: Add permission to restrict circ rules editing to own library

[patch] Bug 15520: Add permission to restrict circ rules editing to own library

Bug-15520-Add-permission-to-restrict-circ-rules-ed.patch (text/plain), 7.46 KB, created by Jonathan Druart on 2018-08-29 17:49:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jonathan Druart

Created: 2018-08-29 17:49:28 UTC

Size: 7.46 KB

patch

obsolete

>From 6758ba9eb1b50e2ae86218053da7545543ff6227 Mon Sep 17 00:00:00 2001
>From: Jesse Weaver <jweaver@bywatersolutions.com>
>Date: Thu, 31 Aug 2017 17:02:42 -0600
>Subject: [PATCH] Bug 15520: Add permission to restrict circ rules editing to
> own library
>
>Test plan:
>
>1) Ensure that you have four users:
> a) A superlibrarian
> b) A user with all `parameters` permissions (the toplevel `parameters`
>    box is checked).
> c) A user with the `manage_circ_rules` permission (and, of course,
>    `catalogue`).
> d) A user with the `manage_circ_rules`, `manage_circ_rules_restricted`
>    and `catalogue` permissions.
>2) As all four users, load the "Circulation and fine rules"
>   administration page (admin/smart-rules.pl).
>3) The page should be unchanged for the first three users. It should be
>   possible to view and edit the circ rules for all libraries.
>4) The last (restricted) user should only be able to view and edit the
>   circ rules for their own library.
>
>Amended by JD: In a second version of this patch
>manage_circ_rules_restricted has been replaced by
>manage_circ_rules_from_any_libraries and 'no_inherit' related code has
>been removed
>---
> admin/smart-rules.pl                               |  7 +++++
> .../bug_15520-add_manage_circ_rules_restricted.sql |  1 +
> installer/data/mysql/userpermissions.sql           |  1 +
> .../intranet-tmpl/prog/en/includes/permissions.inc |  1 +
> .../prog/en/modules/admin/smart-rules.tt           | 30 ++++++++++++----------
> 5 files changed, 26 insertions(+), 14 deletions(-)
> create mode 100644 installer/data/mysql/atomicupdate/bug_15520-add_manage_circ_rules_restricted.sql
>
>diff --git a/admin/smart-rules.pl b/admin/smart-rules.pl
>index eb4ef7b54f..5ca2f61589 100755
>--- a/admin/smart-rules.pl
>+++ b/admin/smart-rules.pl
>@@ -33,6 +33,7 @@ use Koha::RefundLostItemFeeRule;
> use Koha::RefundLostItemFeeRules;
> use Koha::Libraries;
> use Koha::Patron::Categories;
>+use Koha::Patrons;
> 
> my $input = CGI->new;
> my $dbh = C4::Context->dbh;
>@@ -59,6 +60,12 @@ unless ( $branch ) {
>         $branch = C4::Context::only_my_library() ? ( C4::Context::mybranch() || '*' ) : '*';
>     }
> }
>+
>+my $uid = Koha::Patrons->find( $loggedinuser )->userid;
>+my $restricted_to_own_library = $uid && haspermission( $uid, { parameters => 'manage_circ_rules_restricted' }, { no_inherit => 1 } );
>+$template->param( restricted_to_own_library => $restricted_to_own_library );
>+$branch = C4::Context::mybranch() if $restricted_to_own_library;
>+
> $branch = '*' if $branch eq 'NO_LIBRARY_SET';
> 
> my $op = $input->param('op') || q{};
>diff --git a/installer/data/mysql/atomicupdate/bug_15520-add_manage_circ_rules_restricted.sql b/installer/data/mysql/atomicupdate/bug_15520-add_manage_circ_rules_restricted.sql
>new file mode 100644
>index 0000000000..830f4fb0aa
>--- /dev/null
>+++ b/installer/data/mysql/atomicupdate/bug_15520-add_manage_circ_rules_restricted.sql
>@@ -0,0 +1 @@
>+INSERT IGNORE INTO `permissions` (module_bit, code, description) VALUES(3, 'manage_circ_rules_restricted', 'Only manage circ rules for own library');
>diff --git a/installer/data/mysql/userpermissions.sql b/installer/data/mysql/userpermissions.sql
>index 67b76e6871..18fe3f8080 100644
>--- a/installer/data/mysql/userpermissions.sql
>+++ b/installer/data/mysql/userpermissions.sql
>@@ -7,6 +7,7 @@ INSERT INTO permissions (module_bit, code, description) VALUES
>    ( 1, 'manage_checkout_notes', 'Mark checkout notes as seen/not seen'),
>    ( 3, 'parameters_remaining_permissions', 'Remaining system parameters permissions'),
>    ( 3, 'manage_circ_rules', 'Manage circulation rules'),
>+   ( 3, 'manage_circ_rules_restricted', 'Only manage circ rules for own library'),
>    ( 4, 'edit_borrowers', 'Add, modify and view patron information'),
>    ( 4, 'view_borrower_infos_from_any_libraries', 'View patron infos from any libraries'),
>    ( 6, 'place_holds', 'Place holds for patrons'),
>diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/permissions.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/permissions.inc
>index 6193de3ed4..baf966a0e1 100644
>--- a/koha-tmpl/intranet-tmpl/prog/en/includes/permissions.inc
>+++ b/koha-tmpl/intranet-tmpl/prog/en/includes/permissions.inc
>@@ -33,6 +33,7 @@
>     [%- CASE 'override_renewals' -%]<span>Override blocked renewals</span>
>     [%- CASE 'manage_checkout_notes' %]<span>Mark checkout notes as seen/not seen</span>
>     [%- CASE 'manage_circ_rules' -%]<span>manage circulation rules</span>
>+    [%- CASE 'manage_circ_rules_restricted' -%]<span>Limit circulation rules editing to the user's own library (please note that manage_circ_rules is still required)</span>
>     [%- CASE 'parameters_remaining_permissions' -%]<span>Remaining system parameters permissions</span>
>     [%- CASE 'edit_borrowers' -%]<span>Add, modify and view patron information</span>
>     [%- CASE 'view_borrower_infos_from_any_libraries' -%]<span>View patron infos from any libraries. If not set the logged in user could only access patron infos from its own library or group of libraries.</span>
>diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt
>index 058e70a2de..09ef7fc429 100644
>--- a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt
>+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt
>@@ -40,22 +40,24 @@
>         <p>To modify a rule, create a new one with the same patron category and item type.</p>
>     </div>
>     <div>
>-        <form method="get" action="/cgi-bin/koha/admin/smart-rules.pl" id="selectlibrary">
>-        Select a library :
>-            <select name="branch" id="branch" style="width:20em;">
>-                <option value="*">Standard rules for all libraries</option>
>-                [% PROCESS options_for_libraries libraries => Branches.all( selected => current_branch, unfiltered => 1 ) %]
>-            </select>
>-        </form>
>-        [% IF ( definedbranch ) %]
>-            <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
>-                <label for="tobranch"><strong>Clone these rules to:</strong></label>
>-                <input type="hidden" name="frombranch" value="[% current_branch | html %]" />
>-                <select name="tobranch" id="tobranch">
>-                    [% PROCESS options_for_libraries libraries => Branches.all( unfiltered => 1 ) %]
>+        [% UNLESS restricted_to_own_library %]
>+            <form method="get" action="/cgi-bin/koha/admin/smart-rules.pl" id="selectlibrary">
>+            Select a library :
>+                <select name="branch" id="branch" style="width:20em;">
>+                    <option value="*">Standard rules for all libraries</option>
>+                    [% PROCESS options_for_libraries libraries => Branches.all( selected => current_branch, unfiltered => 1 ) %]
>                 </select>
>-                <input type="submit" id="clone_rules" value="Clone" />
>             </form>
>+            [% IF ( definedbranch ) %]
>+                <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
>+                    <label for="tobranch"><strong>Clone these rules to:</strong></label>
>+                    <input type="hidden" name="frombranch" value="[% current_branch | html %]" />
>+                    <select name="tobranch" id="tobranch">
>+                        [% PROCESS options_for_libraries libraries => Branches.all( unfiltered => 1 ) %]
>+                    </select>
>+                    <input type="submit" id="clone_rules" value="Clone" />
>+                </form>
>+            [% END %]
>         [% END %]
> 
>         <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
>-- 
>2.11.0

Actions: View | Diff | Splinter Review

Attachments on bug 15520: 66681 | 67177 | 70387 | 72240 | 72241 | 77202 | 77203 | 77219 | 77220 | 78275 | 78276 | 78722 | 78723 | 78735 | 78736 | 79780 | 79781 | 79782