@@ -, +, @@ empty template_name (updatesupplier.pl) - Apply patch - Connect to intranet with a user having "vendors_manage" permission - Go to acquisition module - Create a new vendor - Click on "Edit vendor" - Change some information and save - Connect to intranet with a user not having "vendors_manage" permission - Try to access /cgi-bin/koha/acqui/updatesupplier.pl - Disconnect from intranet - Try to access /cgi-bin/koha/acqui/updatesupplier.pl --- acqui/updatesupplier.pl | 11 ++--------- 1 file changed, 2 insertions(+), 9 deletions(-) --- a/acqui/updatesupplier.pl +++ a/acqui/updatesupplier.pl @@ -59,15 +59,8 @@ use C4::Output; use CGI qw ( -utf8 ); my $input=new CGI; -my ($template, $loggedinuser, $cookie) = get_template_and_user( - { template_name => "", - query => $input, - type => "intranet", - authnotrequired => 0, - flagsrequired => { acquisition => 'vendors_manage' }, - debug => 1, - } -); + +checkauth( $input, 0, { acquisition => 'vendors_manage' }, 'intranet' ); #print $input->header(); my $booksellerid=$input->param('booksellerid'); --