[koha-commits] main Koha release repository branch master updated. v3.14.00-514-ge9903d7
Git repo owner
gitmaster at git.koha-community.org
Mon Mar 10 15:37:46 CET 2014
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".
The branch, master has been updated
via e9903d760e41410bf871053ccccf00c3a037862d (commit)
via e2de21a943afabc1e9025266d8f1b95df4e57160 (commit)
via 9e5fcb0d5dd230946719ee4825a3d41bd18effe7 (commit)
from 9ca12df4a006901b1f4710f364e3acc0259e46a1 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit e9903d760e41410bf871053ccccf00c3a037862d
Author: Galen Charlton <gmc at esilibrary.com>
Date: Mon Mar 10 14:57:17 2014 +0000
Bug 11866: (follow-up) repair security issue introduced by main patch
The main patch allows /any/ user with an account on the Koha system
to view the staff-side course-reserves home page -- including ordinary
patrons. This patch repairs the oversight.
Signed-off-by: Galen Charlton <gmc at esilibrary.com>
commit e2de21a943afabc1e9025266d8f1b95df4e57160
Author: Jonathan Druart <jonathan.druart at biblibre.com>
Date: Mon Mar 10 14:55:46 2014 +0100
Bug 11866: (follow-up) ensure that empty toolbar is not displayed
If a user does not have course_reserve permission, a an empty toolbar is
displayed.
Signed-off-by: Jonathan Druart <jonathan.druart at biblibre.com>
Signed-off-by: Galen Charlton <gmc at esilibrary.com>
commit 9e5fcb0d5dd230946719ee4825a3d41bd18effe7
Author: Kyle M Hall <kyle at bywatersolutions.com>
Date: Thu Feb 27 08:55:22 2014 -0500
Bug 11866: do not require special permissions to view course reserves in staff interface
A librarian with no course reserves permissions cannot view course
reserves from the staff intranet, yet can from the OPAC. This doesn't
make much sense. Librarians should not require any course reserves
permissions to view courses and reserves from the staff intranet.
Test Plan:
1) Log into staff intranet as a librarian with no course reserves
permissions
2) Note you cannot view course reserves
3) Apply this patch
4) Note you can now view course reserves
5) Verify you cannot modify courses or course reserves
Signed-off-by: Owen Leonard <oleonard at myacpl.org>
Bug 11866 [Follow-up] Staff side course reserves too restrictive
This follow-up patch adds a check for the "UseCourseReserves" system
preference to the display of the Course reserves menu item in the
header.
To test, view the "More" menu with the "UseCourseReserves" system
preference on and off. The menu item should appear and disappear
accordingly.
Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
Signed-off-by: Jonathan Druart <jonathan.druart at biblibre.com>
Signed-off-by: Galen Charlton <gmc at esilibrary.com>
-----------------------------------------------------------------------
Summary of changes:
course_reserves/course-reserves.pl | 2 +-
koha-tmpl/intranet-tmpl/prog/en/includes/header.inc | 2 +-
.../prog/en/modules/course_reserves/course-details.tt | 10 ++++++----
.../prog/en/modules/course_reserves/course-reserves.tt | 3 ++-
4 files changed, 10 insertions(+), 7 deletions(-)
hooks/post-receive
--
main Koha release repository
More information about the koha-commits
mailing list