From 713b30d086dcf5928c6331e8a4fe2c03c547a834 Mon Sep 17 00:00:00 2001 From: Fridolin Somers Date: Thu, 28 Feb 2019 16:23:22 +0100 Subject: [PATCH] Bug 10300: (follow-up) add controls on transfers page This patch moves the check of IndependentBranchesTransfers pref to templates and adds permission test inside branchtransfers.pl. It also corrects the libraries combobox in branchtransfers.tt, this list can contain all libraries, it is the access to the page that may be protected. Additions to test plan : 1) 1.1) Enable CircSidebar 1.2) In circulation home page check the effect of IndependentBranchesTransfers on "Transfer" link 1.3) Go to return page and check then effect of IndependentBranchesTransfers on "Transfer" link 2) 2.1) In circ/branchtransfers.pl, with and without IndependentBranches you see all libraries are in combobox 3) 3.1) Set IndependentBranchesTransfers to no and go to circ/branchtransfers.pl 3.2) You are redirected to page 403 unless you are superlibarian Signed-off-by: Martin Renvoize --- circ/branchtransfers.pl | 6 ++++++ koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc | 2 +- .../intranet-tmpl/prog/en/modules/circ/branchtransfers.tt | 2 +- .../intranet-tmpl/prog/en/modules/circ/circulation-home.tt | 2 +- 4 files changed, 9 insertions(+), 3 deletions(-) diff --git a/circ/branchtransfers.pl b/circ/branchtransfers.pl index e2280a229b..d5b8e9e726 100755 --- a/circ/branchtransfers.pl +++ b/circ/branchtransfers.pl @@ -64,6 +64,12 @@ my ($template, $user, $cookie, $flags ) = get_template_and_user( } ); +# Check transfers is allowed from system preference +if ( C4::Context->preference("IndependentBranchesTransfers") && !C4::Context->IsSuperLibrarian() ) { + print $query->redirect("/cgi-bin/koha/errors/403.pl"); + exit; +} + my $messages; my $found; my $reserved; diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc index bba7beac9b..708ff33e04 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc +++ b/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc @@ -11,7 +11,7 @@
  • Check out
  • Check in
  • Renew
  • - [% IF Branches.InIndependentBranchesMode %] + [% IF !Koha.Preference('IndependentBranchesTransfers') || CAN_user_superlibrarian %]
  • Transfer
  • [% END %] [% IF ( AutoLocation ) %][% ELSE %][% IF ( IndependentBranches ) %][% ELSE %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt index 10c3477527..4859333a3b 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt @@ -152,7 +152,7 @@
  • diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt index f59fcaa6fa..b1bac4ae2b 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt @@ -88,7 +88,7 @@

    Transfers

      - [% IF Branches.InIndependentBranchesMode %] + [% IF !Koha.Preference('IndependentBranchesTransfers') || CAN_user_superlibrarian %]
    • Transfer
    • -- 2.20.1