Bugzilla – Attachment 11904 Details for
Bug 8706
Private lists can be accessed by anyone
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch 8706
patch.txt (text/plain), 976 bytes, created by
Marcel de Rooy
on 2012-08-31 09:53:17 UTC
(
hide
)
Description:
Patch 8706
Filename:
MIME Type:
Creator:
Marcel de Rooy
Created:
2012-08-31 09:53:17 UTC
Size:
976 bytes
patch
obsolete
>From 1a30da5187ac87a2aa7536f56c0b09ae3f446a65 Mon Sep 17 00:00:00 2001 >From: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >Date: Fri, 31 Aug 2012 11:48:51 +0200 >Subject: [PATCH] 8706 Protect private lists for anonymous users >Content-Type: text/plain; charset="utf-8" > >--- > C4/VirtualShelves.pm | 2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > >diff --git a/C4/VirtualShelves.pm b/C4/VirtualShelves.pm >index 20f3620..c235985 100644 >--- a/C4/VirtualShelves.pm >+++ b/C4/VirtualShelves.pm >@@ -464,7 +464,7 @@ sub ShelfPossibleAction { > $sth->execute($user, $shelfnumber); > my $shelf= $sth->fetchrow_hashref; > >- return 0 unless $shelf && ($shelf->{category}==2 || $shelf->{owner}==$user || $shelf->{borrowernumber}==$user); >+ return 0 unless $shelf && ($shelf->{category}==2 || $shelf->{owner}==$user || ($user && $shelf->{borrowernumber}==$user)); > if($action eq 'view') { > #already handled in the above condition > return 1; >-- >1.7.7.6 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 8706
:
11904
|
11905