From b57a1bbb769900a454bad650a4dbb244656a0848 Mon Sep 17 00:00:00 2001 From: Tomas Cohen Arazi Date: Thu, 27 Aug 2015 11:31:42 -0300 Subject: [PATCH] Bug 14737: wrong permissions required for cn_browser.pl plugin The cn_browser.pl cataloguing plugin only searches for used callnumbers on the bibliographic database. There is no need for this plugin to require special permissions besides access to the catalog. To test: - Link the cb_browser.pl cataloguing plugin to 952$o in your favourite cataloguing framework - Login with a superlibrarian user - Try the plugin => SUCCESS: you can use it - Login with a user that has the full 'tools' permission - Try the plugin => SUCCSES: you can use it - Login with a user that doesn't have full 'tools' permission but has the normal catalogue and cataloguing permissions. - Try the plugin => FAIL: you are requested to login with a different user - Apply the patch - Retry => SUCCESS: you can use it - Sign off :-D --- cataloguing/value_builder/cn_browser.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cataloguing/value_builder/cn_browser.pl b/cataloguing/value_builder/cn_browser.pl index 9aa2631..9599666 100755 --- a/cataloguing/value_builder/cn_browser.pl +++ b/cataloguing/value_builder/cn_browser.pl @@ -37,7 +37,7 @@ sub plugin { query => $cgi, type => "intranet", authnotrequired => 0, - flagsrequired => { tools => 'cn_browser', catalogue => 1 }, + flagsrequired => { catalogue => 1 }, } ); -- 2.5.0