Bugzilla – Attachment 4787 Details for
Bug 6642
Able to download label batches as an unauthorized user
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Signed off patch
0001-SIGNED-OFF-Bug-6642-Making-sure-permissions-are-chec.patch (text/plain), 2.45 KB, created by
Katrin Fischer
on 2011-08-01 08:57:51 UTC
(
hide
)
Description:
Signed off patch
Filename:
MIME Type:
Creator:
Katrin Fischer
Created:
2011-08-01 08:57:51 UTC
Size:
2.45 KB
patch
obsolete
>From ff06459f846d1a6adc0c3b44e4b268caece15407 Mon Sep 17 00:00:00 2001 >From: Chris Cormack <chrisc@catalyst.net.nz> >Date: Fri, 29 Jul 2011 09:03:25 +1200 >Subject: [PATCH] [SIGNED-OFF] Bug 6642 : Making sure permissions are checked on label creator >Content-Type: text/plain; charset="utf-8" > >Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de> >--- > labels/label-create-pdf.pl | 32 +++++++++++++++++++++++++++++++- > 1 files changed, 31 insertions(+), 1 deletions(-) > >diff --git a/labels/label-create-pdf.pl b/labels/label-create-pdf.pl >index 608be04..d45b561 100755 >--- a/labels/label-create-pdf.pl >+++ b/labels/label-create-pdf.pl >@@ -1,16 +1,44 @@ > #!/usr/bin/perl > >+# Copyright Chris Nighswonger 2009 >+# >+# This file is part of Koha. >+# >+# Koha is free software; you can redistribute it and/or modify it under the >+# terms of the GNU General Public License as published by the Free Software >+# Foundation; either version 2 of the License, or (at your option) any later >+# version. >+# >+# Koha is distributed in the hope that it will be useful, but WITHOUT ANY >+# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR >+# A PARTICULAR PURPOSE. See the GNU General Public License for more details. >+# >+# You should have received a copy of the GNU General Public License along >+# with Koha; if not, write to the Free Software Foundation, Inc., >+# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. >+ >+ > use strict; > use warnings; > > use CGI; >- >+use C4::Auth; > use C4::Debug; > use C4::Creators 1.000000; > use C4::Labels 1.000000; > > my $cgi = new CGI; > >+my ( $template, $loggedinuser, $cookie ) = get_template_and_user({ >+ template_name => "labels/label-home.tt", >+ query => $cgi, >+ type => "intranet", >+ authnotrequired => 0, >+ flagsrequired => { tools => 'label_creator' }, >+ debug => 1, >+ }); >+ >+ > my $batch_id = $cgi->param('batch_id') if $cgi->param('batch_id'); > my $template_id = $cgi->param('template_id') || undef; > my $layout_id = $cgi->param('layout_id') || undef; >@@ -20,6 +48,8 @@ my @item_numbers = $cgi->param('item_number') if $cgi->param('item_number'); > > my $items = undef; > >+ >+ > my $pdf_file = (@label_ids || @item_numbers ? "label_single_" . scalar(@label_ids || @item_numbers) : "label_batch_$batch_id"); > print $cgi->header( -type => 'application/pdf', > -encoding => 'utf-8', >-- >1.6.3.3 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 6642
:
4768
| 4787