From c3890a598dd293c41d81b7ed85855510dfcfd72f Mon Sep 17 00:00:00 2001 From: Fridolin Somers Date: Thu, 28 Feb 2019 16:23:22 +0100 Subject: [PATCH] Bug 10300: (follow-up) add controls on transfers page This patch moves the check of IndependentBranchesTransfers pref to templates and adds permission test inside branchtransfers.pl. It also corrects the libraries combobox in branchtransfers.tt, this list can contain all libraries, it is the access to the page that may be protected. Additions to test plan : 1) 1.1) Enable CircSidebar 1.2) In circulation home page check the effect of IndependentBranchesTransfers on "Transfer" link 1.3) Go to return page and check then effect of IndependentBranchesTransfers on "Transfer" link 2) 2.1) In circ/branchtransfers.pl, with and without IndependentBranches you see all libraries are in combobox 3) 3.1) Set IndependentBranchesTransfers to no and go to circ/branchtransfers.pl 3.2) You are redirected to page 403 unless you are superlibarian Signed-off-by: Martin Renvoize Signed-off-by: Josef Moravec --- circ/branchtransfers.pl | 6 ++++++ koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt | 2 +- 4 files changed, 9 insertions(+), 3 deletions(-) diff --git a/circ/branchtransfers.pl b/circ/branchtransfers.pl index e2280a2..d5b8e9e 100755 --- a/circ/branchtransfers.pl +++ b/circ/branchtransfers.pl @@ -64,6 +64,12 @@ my ($template, $user, $cookie, $flags ) = get_template_and_user( } ); +# Check transfers is allowed from system preference +if ( C4::Context->preference("IndependentBranchesTransfers") && !C4::Context->IsSuperLibrarian() ) { + print $query->redirect("/cgi-bin/koha/errors/403.pl"); + exit; +} + my $messages; my $found; my $reserved; diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc index bba7bea..708ff33 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc +++ b/koha-tmpl/intranet-tmpl/prog/en/includes/circ-nav.inc @@ -11,7 +11,7 @@
  • Check out
  • Check in
  • Renew
  • - [% IF Branches.InIndependentBranchesMode %] + [% IF !Koha.Preference('IndependentBranchesTransfers') || CAN_user_superlibrarian %]
  • Transfer
  • [% END %] [% IF ( AutoLocation ) %][% ELSE %][% IF ( IndependentBranches ) %][% ELSE %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt index 10c3477..4859333 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt @@ -152,7 +152,7 @@
  • diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt index f59fcaa..b1bac4a 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation-home.tt @@ -88,7 +88,7 @@

    Transfers

      - [% IF Branches.InIndependentBranchesMode %] + [% IF !Koha.Preference('IndependentBranchesTransfers') || CAN_user_superlibrarian %]
    • Transfer
    • -- 2.1.4