Summary: | It is possible to email someone else's private list | ||
---|---|---|---|
Product: | Koha | Reporter: | Owen Leonard <oleonard> |
Component: | Lists | Assignee: | Owen Leonard <oleonard> |
Status: | CLOSED FIXED | QA Contact: | |
Severity: | major | ||
Priority: | PATCH-Sent (DO NOT USE) | CC: | chris, koha.sekjal, nengard, paul.poulain |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
GIT URL: | Change sponsored?: | --- | |
Patch complexity: | --- | Documentation contact: | |
Documentation submission: | Text to go in the release notes: | ||
Version(s) released in: | Circulation function: | ||
Attachments: |
Proposed fix for the OPAC
proposed fix signed-off |
Description
Chris Cormack
2010-05-21 01:06:56 UTC
This bug still exists in master. Created attachment 4145 [details] [review] Proposed fix for the OPAC Adding check for ShelfPossibleAction("view") to make sure the logged in user has permission to view the selected list when downloading or emailing a list. Created attachment 4189 [details] [review] proposed fix signed-off tested, confirmed, marking as Passed QA Permission works, pushed please test and mark resolved Working in master since May. Closing. |