From 6696426228e7f46d80d336474376e2bd0c123ba9 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Thu, 11 May 2023 12:05:04 +0200 Subject: [PATCH] Bug 33595: (bug 26628 follow-up) Fix authorization for tools-home.pl If you log into the OPAC as a user with no flags, you can see a restricted view of /cgi-bin/koha/tools/tools-home.pl instead of seeing the login screen. Test plan: Use a patron with catalogue permission only Login and access the tools home page => redirected to the login screen Add a club sub permission Login and access the tools home page => You see the tools home page with the clubs link Add a tool sub permission, remove club Login and access the tools home page => You see the tools home page with the relevant link --- tools/tools-home.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/tools-home.pl b/tools/tools-home.pl index 8ae79538425..ed7f823485c 100755 --- a/tools/tools-home.pl +++ b/tools/tools-home.pl @@ -29,7 +29,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( template_name => "tools/tools-home.tt", query => $query, type => "intranet", - flagsrequired => [ tools => '*', clubs => '*' ], + flagsrequired => [ { tools => '*' }, { clubs => '*' } ], } ); -- 2.25.1