From 62e60ff951a9713a775fa8059de645838518b011 Mon Sep 17 00:00:00 2001 From: Marcel de Rooy Date: Mon, 22 Nov 2021 07:55:47 +0000 Subject: [PATCH] Bug 29540: Raise flagsrequired in modrequest Content-Type: text/plain; charset=utf-8 Same level as circulation.pl Test plan: Try modrequest with a user having only 'catalogue' perms and the following URLs: [1] /cgi-bin/koha/reserve/modrequest.pl?reserve_id=XX&CancelBorrowerNumber=XX&CancelItemnumber=XX&biblionumber=XX Fill the XXs with correct identifiers for some item level hold. [2] /cgi-bin/koha/reserve/modrequest_suspendall.pl?suspend=1&suspend_until=2021-12-01&borrowernumber=XX Fill the XX with borrowernumber for borrower that has pending holds. You should see: Error: You do not have permission to access this page. Signed-off-by: Marcel de Rooy --- reserve/modrequest.pl | 2 +- reserve/modrequest_suspendall.pl | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/reserve/modrequest.pl b/reserve/modrequest.pl index 3a7c3deb6b..162b7cc7ea 100755 --- a/reserve/modrequest.pl +++ b/reserve/modrequest.pl @@ -36,7 +36,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( template_name => "about.tt", query => $query, type => "intranet", - flagsrequired => { catalogue => 1 }, + flagsrequired => { circulate_remaining_permissions => 1 }, } ); diff --git a/reserve/modrequest_suspendall.pl b/reserve/modrequest_suspendall.pl index 3217dbffb4..c8e22c300b 100755 --- a/reserve/modrequest_suspendall.pl +++ b/reserve/modrequest_suspendall.pl @@ -34,7 +34,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( template_name => "about.tt", query => $query, type => "intranet", - flagsrequired => { catalogue => 1 }, + flagsrequired => { circulate_remaining_permissions => 1 }, } ); -- 2.20.1