[Koha-bugs] [Bug 10232] New: Permission check for editing help files is broken
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Sun May 12 16:26:47 CEST 2013
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10232
Bug ID: 10232
Summary: Permission check for editing help files is broken
Classification: Unclassified
Change sponsored?: ---
Product: Koha
Version: master
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: Authentication
Assignee: gmcharlt at gmail.com
Reporter: katrin.fischer at bsz-bw.de
CC: dpavlin at rot13.org
To test:
- Try editing a help file as superlibrarian, confirm you get to the editor. You
might not be able to save your changes though, because of file permissions.
- Try editing a help file with any of the listed permissions from the
edithelp.pl file:
43 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
44 {
45 template_name => "help/edithelp.tt",
46 query => $input,
47 type => "intranet",
48 authnotrequired => 0,
49 flagsrequired => {
50 catalogue => 1,
51 circulate => 1,
52 parameters => 1,
53 borrowers => 1,
54 permissions => 1,
55 reserveforothers => 1,
56 borrow => 1,
57 reserveforself => 1,
58 editcatalogue => 1,
59 updatecharges => 1,
60 },
61 debug => 1,
62 }
63 );
Verify it doesn't work.
I think reserveforself doesn't exist in current Koha and the choice of
permissions seems a bit arbitrary.
--
You are receiving this mail because:
You are watching all bug changes.
More information about the Koha-bugs
mailing list