Bug 14440: get_template_and_user can not have an empty template_name (updatesupplier.pl)
authorFridolin Somers <fridolin.somers@biblibre.com>
Tue, 23 Jun 2015 14:45:21 +0000 (16:45 +0200)
committerTomas Cohen Arazi <tomascohen@unc.edu.ar>
Thu, 25 Jun 2015 13:29:53 +0000 (10:29 -0300)
commit015c26a5e36dae5070eab57f400237715d93ae44
tree08ee9b09165ad2c36cc7be20ffc17e0c2ca3c2e9
parent186b635a75c4e67b20d6fd80d9fee3a8cb3cd2cb
Bug 14440: get_template_and_user can not have an empty template_name (updatesupplier.pl)

Since Bug 14408, the method get_template_and_user can not have an empty template_name.
Pages calling with an empty value should use C4::Auth::checkauth()

This patch corrects acqui/updatesupplier.pl

Test plan :
- Apply patch
- Connect to intranet with a user having "vendors_manage" permission
- Go to acquisition module
- Create a new vendor
- Click on "Edit vendor"
- Change some information and save
=> Your change is saved
- Connect to intranet with a user not having "vendors_manage" permission
- Try to access <intranet>/cgi-bin/koha/acqui/updatesupplier.pl
=> Access is denied
- Disconnect from intranet
- Try to access <intranet>/cgi-bin/koha/acqui/updatesupplier.pl
=> Access is denied

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
acqui/updatesupplier.pl