From 6429e406e78a6ef9c9aeb9f9ca7140cedf0a2533 Mon Sep 17 00:00:00 2001 From: Liz Rea Date: Thu, 28 Jul 2011 15:59:15 -0500 Subject: [PATCH] Bug 6643 -- Able to download patron card batches as an unauthorized user Content-Type: text/plain; charset="utf-8" Making sure permissions are checked on label creator --- patroncards/create-pdf.pl | 11 +++++++++++ 1 files changed, 11 insertions(+), 0 deletions(-) diff --git a/patroncards/create-pdf.pl b/patroncards/create-pdf.pl index f063e9b..961dfbf 100755 --- a/patroncards/create-pdf.pl +++ b/patroncards/create-pdf.pl @@ -21,6 +21,7 @@ use strict; use warnings; use CGI; +use C4::Auth; use Graphics::Magick; use XML::Simple; use POSIX qw(ceil); @@ -34,6 +35,16 @@ use C4::Patroncards 1.000000; my $cgi = new CGI; +my ( $template, $loggedinuser, $cookie ) = get_template_and_user({ + template_name => "labels/label-home.tt", + query => $cgi, + type => "intranet", + authnotrequired => 0, + flagsrequired => { tools => 'label_creator' }, + debug => 1, + }); + + my $batch_id = $cgi->param('batch_id') if $cgi->param('batch_id'); my $template_id = $cgi->param('template_id') || undef; my $layout_id = $cgi->param('layout_id') || undef; -- 1.7.2.5