Bugzilla – Attachment 128801 Details for
Bug 29541
Patron images can be accessed with just 'catalogue' permission
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 29541: Restrict access to patron's image to borrowers => * and circulate => *
Bug-29541-Restrict-access-to-patrons-image-to-borr.patch (text/plain), 1.04 KB, created by
Katrin Fischer
on 2021-12-20 21:57:25 UTC
(
hide
)
Description:
Bug 29541: Restrict access to patron's image to borrowers => * and circulate => *
Filename:
MIME Type:
Creator:
Katrin Fischer
Created:
2021-12-20 21:57:25 UTC
Size:
1.04 KB
patch
obsolete
>From b8c6cf21b26ffe9233d263166fae62c0bbda747e Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Mon, 22 Nov 2021 15:29:58 +0100 >Subject: [PATCH] Bug 29541: Restrict access to patron's image to borrowers => > * and circulate => * > >The patron images is displayed on the 'circulation' and 'members' >modules. > >Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> >--- > members/patronimage.pl | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >diff --git a/members/patronimage.pl b/members/patronimage.pl >index da62b87553..c4a6e5eb40 100755 >--- a/members/patronimage.pl >+++ b/members/patronimage.pl >@@ -47,7 +47,7 @@ This script, when called from within HTML and passed a valid patron borrowernumb > > =cut > >-my ($status, $cookie, $sessionID) = check_api_auth($query, { catalogue => 1 } ); >+my ($status, $cookie, $sessionID) = check_api_auth($query, [ { borrowers => '*' }, { circulate => '*' } ] ); > > unless ( $status eq 'ok' ) { > print $query->header(-type => 'text/plain', -status => '403 Forbidden'); >-- >2.11.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 29541
:
127932
|
128276
|
128801
|
128802
|
129333
|
129334