From 1b649536129db21128bf3c1d4695ff981ff699ea Mon Sep 17 00:00:00 2001 From: Paul Poulain Date: Tue, 5 Apr 2011 17:55:01 +0200 Subject: [PATCH] BZ6072: fixing permission inconsistencies MT5306 In large libraries, some librarian may have permission only to recieve shipments This patch fixes some permission : * booksellers page = accessible to anyone that has at least 1 acq permission * parcels = accessible to anyone with order_recieve * supplier detail = accessible to anyone that has at least 1 acq permission, but modifying accessible only if vendor_manage --- acqui/booksellers.pl | 2 +- acqui/parcels.pl | 2 +- acqui/supplier.pl | 2 +- .../prog/en/includes/acquisitions-toolbar.inc | 22 +++++++++++-------- 4 files changed, 16 insertions(+), 12 deletions(-) diff --git a/acqui/booksellers.pl b/acqui/booksellers.pl index 88dbaa9..cc5c084 100755 --- a/acqui/booksellers.pl +++ b/acqui/booksellers.pl @@ -66,7 +66,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( query => $query, type => 'intranet', authnotrequired => 0, - flagsrequired => { acquisition => 'vendors_manage' }, + flagsrequired => { acquisition => '*' }, debug => 1, } ); diff --git a/acqui/parcels.pl b/acqui/parcels.pl index 1e8d44e..915b1e8 100755 --- a/acqui/parcels.pl +++ b/acqui/parcels.pl @@ -91,7 +91,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( query => $input, type => 'intranet', authnotrequired => 0, - flagsrequired => { acquisition => 1 }, + flagsrequired => { acquisition => 'order_receive' }, debug => 1, } ); diff --git a/acqui/supplier.pl b/acqui/supplier.pl index 52d940c..2a4078a 100755 --- a/acqui/supplier.pl +++ b/acqui/supplier.pl @@ -64,7 +64,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( query => $query, type => 'intranet', authnotrequired => 0, - flagsrequired => { acquisition => 'vendors_manage' }, + flagsrequired => { acquisition => '*' }, debug => 1, } ); diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-toolbar.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-toolbar.inc index 9f7a8e5..a11417a 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-toolbar.inc +++ b/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-toolbar.inc @@ -21,9 +21,11 @@ new YAHOO.widget.Button("editcontracts"); var manageorders = [ - { text: _("New basket"), url: "/cgi-bin/koha/acqui/basketheader.pl?booksellerid=&op=add_form"}, - { text: _("Baskets"), url: "/cgi-bin/koha/acqui/booksellers.pl?supplierid="}, - { text: _("Basket groups"), url: "/cgi-bin/koha/acqui/basketgroup.pl?booksellerid="}, + + { text: _("New basket"), url: "/cgi-bin/koha/acqui/basketheader.pl?booksellerid=&op=add_form"}, + { text: _("Baskets"), url: "/cgi-bin/koha/acqui/booksellers.pl?supplierid="}, + { text: _("Basket groups"), url: "/cgi-bin/koha/acqui/basketgroup.pl?booksellerid="}, + { text: _("Receive shipments"), url: "/cgi-bin/koha/acqui/parcels.pl?supplierid=" }, { text: _("Uncertain prices"), url: "/cgi-bin/koha/acqui/uncertainprice.pl?booksellerid=&basketno=&owner=1"} @@ -42,12 +44,14 @@