@@ -, +, @@ users --- circ/del_message.pl | 9 +++++++++ 1 file changed, 9 insertions(+) --- a/circ/del_message.pl +++ a/circ/del_message.pl @@ -39,6 +39,15 @@ my $borrowernumber = $input->param('borrowernumber'); my $message_id = $input->param('message_id'); my $message = Koha::Patron::Messages->find($message_id); +my $logged_in_patron = Koha::Patrons->find($loggedinuser); +if ( $message + && !C4::Context->preference('AllowAllMessageDeletion') + && $logged_in_patron->branchcode ne $message->branchcode ) +{ + print $input->redirect("/cgi-bin/koha/errors/403.pl"); + exit; +} + $message->delete if $message; if ( $input->param('from') eq "moremember" ) { --