From 09d4e0cc58e12d11e9bb6a22f60fbb5630d85294 Mon Sep 17 00:00:00 2001 From: Mathieu Saby Date: Sun, 22 Dec 2013 22:48:34 +0100 Subject: [PATCH] [SIGNED OFF] Bug 11027 - Create a link only if user have required permissions With this followup, a user without order_manage permission won't be able to cick on a basket and a user without group_manage permission won't be able to click on a basketgroup Note that the issue for basket is present in current master. So it deserves a separate bugfix (as bug 11027 is an ENH) Signed-off-by: Mark Tompsett --- .../prog/en/modules/acqui/lateorders.tt | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt index a036945..c5341c2 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt @@ -159,10 +159,18 @@ $(document).ready(function() { [% lateorder.subtotal %] - [% lateorder.basketname %] ([% lateorder.basketno %]) + [% IF ( CAN_user_acquisition_order_manage ) %] + [% lateorder.basketname %] ([% lateorder.basketno %]) + [% ELSE %] + [% lateorder.basketname %] ([% lateorder.basketno %]) + [% END %] - [% lateorder.basketgroupname %] ([% lateorder.basketgroupid %]) + [% IF ( CAN_user_acquisition_group_manage ) %] + [% lateorder.basketgroupname %] ([% lateorder.basketgroupid %]) + [% ELSE %] + [% lateorder.basketgroupname %] ([% lateorder.basketgroupid %]) + [% END %] [% lateorder.branch %] -- 1.7.9.5