Lines 59-64
use CGI;
Link Here
|
59 |
use C4::Dates qw/format_date/; |
59 |
use C4::Dates qw/format_date/; |
60 |
use C4::Bookseller qw/ GetBookSellerFromId GetBookSeller /; |
60 |
use C4::Bookseller qw/ GetBookSellerFromId GetBookSeller /; |
61 |
use C4::Members qw/GetMember/; |
61 |
use C4::Members qw/GetMember/; |
|
|
62 |
use C4::Context; |
62 |
|
63 |
|
63 |
my $query = CGI->new; |
64 |
my $query = CGI->new; |
64 |
my ( $template, $loggedinuser, $cookie ) = get_template_and_user( |
65 |
my ( $template, $loggedinuser, $cookie ) = get_template_and_user( |
Lines 95-120
if ($loggedinuser) {
Link Here
|
95 |
$uid = GetMember( borrowernumber => $loggedinuser )->{userid}; |
96 |
$uid = GetMember( borrowernumber => $loggedinuser )->{userid}; |
96 |
} |
97 |
} |
97 |
|
98 |
|
|
|
99 |
my $userenv = C4::Context::userenv; |
100 |
my $viewbaskets = C4::Context->preference('AcqViewBaskets'); |
101 |
|
102 |
my $userbranch = $userenv->{branch}; |
103 |
|
98 |
#build result page |
104 |
#build result page |
99 |
my $loop_suppliers = []; |
105 |
my $loop_suppliers = []; |
100 |
|
106 |
|
|
|
107 |
my %branchcache; |
108 |
|
101 |
for my $vendor (@suppliers) { |
109 |
for my $vendor (@suppliers) { |
102 |
my $baskets = get_vendors_baskets( $vendor->{id} ); |
110 |
my $baskets = get_vendors_baskets( $vendor->{id} ); |
103 |
|
111 |
|
104 |
my $loop_basket = []; |
112 |
my $loop_basket = []; |
|
|
113 |
|
105 |
for my $basket ( @{$baskets} ) { |
114 |
for my $basket ( @{$baskets} ) { |
106 |
if (( $basket->{authorisedby} |
115 |
my $authorisedby = $basket->{authorisedby}; |
107 |
&& $basket->{authorisedby} eq $loggedinuser |
116 |
my $basketbranch = GetMember( borrowernumber => $authorisedby )->{branchcode}; |
108 |
) |
117 |
|
109 |
|| haspermission( $uid, { acquisition => q{*} } ) |
118 |
if (C4::Context->userenv->{flags}==1 || #FIXME check for superlibrarian does not work |
110 |
) { |
119 |
(haspermission( $uid, { acquisition => q{*} } ) && #user has acq permissions and |
|
|
120 |
($viewbaskets eq 'all' || #user is allowed to see all baskets or |
121 |
($viewbaskets eq 'branch' && $authorisedby && $userbranch eq $basketbranch) || #basket belongs to user's branch or |
122 |
($basket->{authorisedby} && $viewbaskets == 'user' && $authorisedby == $loggedinuser) #user created this basket |
123 |
) |
124 |
) |
125 |
) { |
111 |
for my $date_field (qw( creationdate closedate)) { |
126 |
for my $date_field (qw( creationdate closedate)) { |
112 |
if ( $basket->{$date_field} ) { |
127 |
if ( $basket->{$date_field} ) { |
113 |
$basket->{$date_field} = |
128 |
$basket->{$date_field} = format_date( $basket->{$date_field} ); |
114 |
format_date( $basket->{$date_field} ); |
|
|
115 |
} |
129 |
} |
116 |
} |
130 |
} |
117 |
push @{$loop_basket}, $basket; |
131 |
push @{$loop_basket}, $basket; |
118 |
} |
132 |
} |
119 |
} |
133 |
} |
120 |
|
134 |
|