Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)
authorJonathan Druart <jonathan.druart@koha-community.org>
Wed, 24 Jun 2015 09:03:22 +0000 (11:03 +0200)
committerMason James <mtj@kohaaloha.com>
Sat, 25 Jul 2015 13:20:07 +0000 (01:20 +1200)
commitbbc42b204b2ded11a9462c9bbd4be7dd99e3a44d
tree556bea491f5c0d883cb34dd0f7bdce8f6c589140
parentbad18ee246e77bcbc41810a6594676d69408df92
 Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)

This patch uses check_api_auth instead of get_template_and_user.

Test plan:
Confirm that you are still able to access to the quote editor with the
edit_quotes permission.
Confirm that you are not if you don't have the permission.

wget your_url/cgi-bin/koha/tools/quotes/quotes_ajax.pl
should return "403 : Forbidden."

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
tools/quotes/quotes-upload_ajax.pl
tools/quotes/quotes_ajax.pl