[Koha-bugs] [Bug 29508] GET /patrons/:patron_id should use Koha::Patrons->search_limited

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29508

--- Comment #2 from Tomás Cohen Arazi <tomascohen at gmail.com> ---
Created attachment 127758
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=127758&action=edit
Bug 29508: Make GET /patrons/:patron_id use Koha::Patrons->search_limited

This patch makes the route return 404 if the user is not allowed to see
the requested patron information.

To test:
1. Apply the regression tests
2. Run:
   $ kshell
  k$ prove t/db_dependent/api/v1/patrons.t
=> FAIL: The code doesn't respect limits
3. Apply this patch
4. Repeat 2
=> SUCCESS: Tests pass!
5. Sign off :-D

Signed-off-by: Tomas Cohen Arazi <tomascohen at theke.io>

-- 
You are receiving this mail because:
You are watching all bug changes.