[Koha-bugs] [Bug 10232] New: Permission check for editing help files is broken

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Sun May 12 16:26:47 CEST 2013


http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10232

            Bug ID: 10232
           Summary: Permission check for editing help files is broken
    Classification: Unclassified
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Authentication
          Assignee: gmcharlt at gmail.com
          Reporter: katrin.fischer at bsz-bw.de
                CC: dpavlin at rot13.org

To test:
- Try editing a help file as superlibrarian, confirm you get to the editor. You
might not be able to save your changes though, because of file permissions.

- Try editing a help file with any of the listed permissions from the
edithelp.pl file:

  43 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
  44     {
  45         template_name   => "help/edithelp.tt",
  46         query           => $input,
  47         type            => "intranet",
  48         authnotrequired => 0,
  49         flagsrequired   => {
  50             catalogue        => 1,
  51             circulate        => 1,
  52             parameters       => 1,
  53             borrowers        => 1,
  54             permissions      => 1,
  55             reserveforothers => 1,
  56             borrow           => 1,
  57             reserveforself   => 1,
  58             editcatalogue    => 1,
  59             updatecharges    => 1,
  60         },
  61         debug => 1,
  62     }
  63 );

Verify it doesn't work.

I think reserveforself doesn't exist in current Koha and the choice of
permissions seems a bit arbitrary.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list