From 60277eb2480d67b548f501c0246e0d7ac26460e2 Mon Sep 17 00:00:00 2001 From: Mathieu Saby Date: Sun, 22 Dec 2013 22:48:34 +0100 Subject: [PATCH 2/2] Bug 11027 - Create a link only if user have required permissions Content-Type: text/plain; charset="utf-8" With this followup, a user without order_manage permission won't be able to cick on a basket and a user without group_manage permission won't be able to click on a basketgroup Note that the issue for basket is present in current master. So it deserves a separate bugfix (as bug 11027 is an ENH) --- .../prog/en/modules/acqui/lateorders.tt | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt index a036945..c5341c2 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt @@ -159,10 +159,18 @@ $(document).ready(function() { [% lateorder.subtotal %] - [% lateorder.basketname %] ([% lateorder.basketno %]) + [% IF ( CAN_user_acquisition_order_manage ) %] + [% lateorder.basketname %] ([% lateorder.basketno %]) + [% ELSE %] + [% lateorder.basketname %] ([% lateorder.basketno %]) + [% END %] - [% lateorder.basketgroupname %] ([% lateorder.basketgroupid %]) + [% IF ( CAN_user_acquisition_group_manage ) %] + [% lateorder.basketgroupname %] ([% lateorder.basketgroupid %]) + [% ELSE %] + [% lateorder.basketgroupname %] ([% lateorder.basketgroupid %]) + [% END %] [% lateorder.branch %] -- 1.7.9.5