Summary: | It is possible to email someone else's private list | ||
---|---|---|---|
Product: | Koha | Reporter: | Owen Leonard <oleonard> |
Component: | Lists | Assignee: | Owen Leonard <oleonard> |
Status: | CLOSED FIXED | QA Contact: | |
Severity: | major | ||
Priority: | PATCH-Sent (DO NOT USE) | CC: | chris, koha.sekjal, nengard, paul.poulain |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | --- |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: | |||
Attachments: |
Proposed fix for the OPAC
proposed fix signed-off |
Description
Chris Cormack
2010-05-21 01:06:56 UTC
This bug still exists in master. Created attachment 4145 [details] [review] Proposed fix for the OPAC Adding check for ShelfPossibleAction("view") to make sure the logged in user has permission to view the selected list when downloading or emailing a list. Created attachment 4189 [details] [review] proposed fix signed-off tested, confirmed, marking as Passed QA Permission works, pushed please test and mark resolved Working in master since May. Closing. |