[Bug 33999] New: Subscription details link on bibliographic detail page should have permission check
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Bug ID: 33999 Summary: Subscription details link on bibliographic detail page should have permission check Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: Templates Assignee: oleonard@myacpl.org Reporter: oleonard@myacpl.org QA Contact: testopia@bugs.koha-community.org On the bibliographic detail page for a serial record, under the "Subscriptions" tab, there is a link to "Subscription details." This link takes the user to the Serials module, so it should not be displayed if the user doesn't have the correct permission. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Owen Leonard <oleonard@myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |Needs Signoff Patch complexity|--- |Trivial patch -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 --- Comment #1 from Owen Leonard <oleonard@myacpl.org> --- Created attachment 152314 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=152314&action=edit Bug 33999: Subscription details link on bibliographic detail page should have permission check This patch wraps the "Subscription details" link on the bibliographic detail page with a permissions check, "CAN_user_serials," so that a user lacking permission to access the Serials module will not be shown the link. To test, apply the patch and view the bibliographic detail page of a serial record. - When viewing the "Subscriptions" tab as a user with Serials permissions you should see the "Subscription details" link. - When viewing the tab as a user without the correct permissions the link should not be present. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Lucas Gass <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Signed Off -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Lucas Gass <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #152314|0 |1 is obsolete| | --- Comment #2 from Lucas Gass <lucas@bywatersolutions.com> --- Created attachment 152320 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=152320&action=edit Bug 33999: Subscription details link on bibliographic detail page should have permission check This patch wraps the "Subscription details" link on the bibliographic detail page with a permissions check, "CAN_user_serials," so that a user lacking permission to access the Serials module will not be shown the link. To test, apply the patch and view the bibliographic detail page of a serial record. - When viewing the "Subscriptions" tab as a user with Serials permissions you should see the "Subscription details" link. - When viewing the tab as a user without the correct permissions the link should not be present. Signed-off-by: Lucas Gass <lucas@bywatersolutions.com> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Failed QA --- Comment #3 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- The permission check is correct of course, but I am not sure about turning this into a button. For me a button means "action", but here it's "navigation". Owen, what do you think? -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Owen Leonard <oleonard@myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Failed QA |Signed Off -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 --- Comment #4 from Owen Leonard <oleonard@myacpl.org> --- Created attachment 152687 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=152687&action=edit Bug 33999: (follow-up) Use link-styled button -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #152320|0 |1 is obsolete| | --- Comment #5 from Martin Renvoize <martin.renvoize@ptfs-europe.com> --- Created attachment 152977 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=152977&action=edit Bug 33999: Subscription details link on bibliographic detail page should have permission check This patch wraps the "Subscription details" link on the bibliographic detail page with a permissions check, "CAN_user_serials," so that a user lacking permission to access the Serials module will not be shown the link. To test, apply the patch and view the bibliographic detail page of a serial record. - When viewing the "Subscriptions" tab as a user with Serials permissions you should see the "Subscription details" link. - When viewing the tab as a user without the correct permissions the link should not be present. Signed-off-by: Lucas Gass <lucas@bywatersolutions.com> Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #152687|0 |1 is obsolete| | --- Comment #6 from Martin Renvoize <martin.renvoize@ptfs-europe.com> --- Created attachment 152978 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=152978&action=edit Bug 33999: (follow-up) Use link-styled button Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |martin.renvoize@ptfs-europe | |.com QA Contact|testopia@bugs.koha-communit |martin.renvoize@ptfs-europe |y.org |.com Status|Signed Off |Passed QA --- Comment #7 from Martin Renvoize <martin.renvoize@ptfs-europe.com> --- Nice catch, Passing QA -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Tomás Cohen Arazi <tomascohen@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)| |23.11.00 released in| | Status|Passed QA |Pushed to master -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 --- Comment #8 from Tomás Cohen Arazi <tomascohen@gmail.com> --- Pushed to master for 23.11. Nice work everyone, thanks! -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to master |Pushed to stable Version(s)|23.11.00 |23.11.00,23.05.02 released in| | -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 --- Comment #9 from Martin Renvoize <martin.renvoize@ptfs-europe.com> --- Thanks for all the hard work! Pushed to 23.05.x for the next release -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 Matt Blenkinsop <matt.blenkinsop@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|23.11.00,23.05.02 |23.11.00,23.05.02,22.11.08 released in| | Status|Pushed to stable |Pushed to oldstable -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33999 --- Comment #10 from Matt Blenkinsop <matt.blenkinsop@ptfs-europe.com> --- Nice work everyone! Pushed to oldstable for 22.11.x -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org