@@ -, +, @@ - Apply patch - Create a user with sufficient privileges to delete users - Log in as this new user - Try to delete this user. Confirm message box "Are you sure..." - Confirm that you get a message "Not allowed to delete own account" and that the user still exists. --- .../intranet-tmpl/prog/en/modules/members/moremember.tt | 13 +++++++++---- members/deletemem.pl | 6 ++++++ members/moremember.pl | 2 ++ 3 files changed, 17 insertions(+), 4 deletions(-) --- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/moremember.tt +++ a/koha-tmpl/intranet-tmpl/prog/en/modules/members/moremember.tt @@ -140,22 +140,27 @@ function validate1(date) {
[% INCLUDE 'members-toolbar.inc' %] + [% IF ( error ) %]
- [% IF ( AUTH_UPDATE_FAILED ) %] + [% IF ( error == 'AUTH_UPDATE_FAILED' ) %]

Userid / Password update failed

Insufficient privileges.

Other fields updated.

[% END %] - [% IF ( CANT_DELETE_STAFF ) %] + [% IF ( error == 'CANT_DELETE_STAFF' ) %]

Unable to delete staff user

Insufficient privileges.

[% END %] - [% IF ( CANT_DELETE_OTHERLIBRARY ) %] + [% IF ( error == 'CANT_DELETE_YOURSELF' ) %] +

Not allowed to delete own account

+

Deleting your own account would lock you out from Koha.

+ [% END %] + [% IF ( error == 'CANT_DELETE_OTHERLIBRARY' ) %]

Unable to delete patrons from other libraries with current settings

Insufficient privileges.

[% END %] - [% IF ( CANT_DELETE ) %] + [% IF ( error == 'CANT_DELETE' ) %]

Unable to delete patron

Insufficient privileges.

[% END %] --- a/members/deletemem.pl +++ a/members/deletemem.pl @@ -50,6 +50,12 @@ my ($template, $borrowernumber, $cookie) #print $input->header; my $member = $input->param('member'); +#Do not delete yourself... +if ($borrowernumber == $member ) { + print $input->redirect("/cgi-bin/koha/members/moremember.pl?borrowernumber=$member&error=CANT_DELETE_YOURSELF"); + exit 1; +} + # Handle deletion from the Norwegian national patron database, if it is enabled # If the "deletelocal" parameter is set to "false", the regular deletion will be # short circuited, and only a deletion from the national database can be carried --- a/members/moremember.pl +++ a/members/moremember.pl @@ -112,6 +112,8 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( } ); my $borrowernumber = $input->param('borrowernumber'); +my $error = $input->param('error'); +$template->param( error => $error ) if ( $error ); my ( $od, $issue, $fines ) = GetMemberIssuesAndFines($borrowernumber); $template->param( issuecount => $issue ); --