Bug 17423 - patronimage.pl permission is too restrictive
authorFridolin Somers <fridolin.somers@biblibre.com>
Tue, 11 Oct 2016 08:00:56 +0000 (10:00 +0200)
committerJulian Maurice <julian.maurice@biblibre.com>
Mon, 24 Oct 2016 10:33:12 +0000 (12:33 +0200)
commit96c2ee18ec079f76ac28e581a0b1194743a81542
treec24cac585b79f6bee7c12a79bbea908bbf3d01c0
parent5bb0978f1bff9fc1b04e072ea3bd190a32db731b
Bug 17423 - patronimage.pl permission is too restrictive

Bug 14566 added the permission "borrowers" on patronimage.pl.
This perm is too restrictive because circulation pages also uses this page.

I propose to simply use "catalogue" perm.

Test plan
- Set an image to borrower xx
- Create a user with only catalogue permission
- Log with this user
- Go to page (replace xx by borrower number) : /cgi-bin/koha/members/patronimage.pl?borrowernumber=xx
=> Without patch you get the page saying you do not have the permission
=> With patch you get the image
- Log out and retest the page patronimage.pl
=> You get 403 error

Signed-off-by: remy <remy.gonzalves@iepg.fr>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
(cherry picked from commit e78f81d615a79ad293d599c7395efcabd267662d)
Signed-off-by: Frédéric Demians <f.demians@tamil.fr>
(cherry picked from commit f620fbe0d9ec8c4df258dd3a35b839b466479d52)
Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
members/patronimage.pl