@@ -, +, @@ * and circulate => * --- members/patronimage.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/members/patronimage.pl +++ a/members/patronimage.pl @@ -47,7 +47,7 @@ This script, when called from within HTML and passed a valid patron borrowernumb =cut -my ($status, $cookie, $sessionID) = check_api_auth($query, { catalogue => 1 } ); +my ($status, $cookie, $sessionID) = check_api_auth($query, [ { borrowers => '*' }, { circulate => '*' } ] ); unless ( $status eq 'ok' ) { print $query->header(-type => 'text/plain', -status => '403 Forbidden'); --