[koha-commits] main Koha release repository branch master updated. v3.14.00-514-ge9903d7

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  e9903d760e41410bf871053ccccf00c3a037862d (commit)
       via  e2de21a943afabc1e9025266d8f1b95df4e57160 (commit)
       via  9e5fcb0d5dd230946719ee4825a3d41bd18effe7 (commit)
      from  9ca12df4a006901b1f4710f364e3acc0259e46a1 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit e9903d760e41410bf871053ccccf00c3a037862d
Author: Galen Charlton <gmc at esilibrary.com>
Date:   Mon Mar 10 14:57:17 2014 +0000

    Bug 11866: (follow-up) repair security issue introduced by main patch
    
    The main patch allows /any/ user with an account on the Koha system
    to view the staff-side course-reserves home page -- including ordinary
    patrons.  This patch repairs the oversight.
    
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>

commit e2de21a943afabc1e9025266d8f1b95df4e57160
Author: Jonathan Druart <jonathan.druart at biblibre.com>
Date:   Mon Mar 10 14:55:46 2014 +0100

    Bug 11866: (follow-up) ensure that empty toolbar is not displayed
    
    If a user does not have course_reserve permission, a an empty toolbar is
    displayed.
    
    Signed-off-by: Jonathan Druart <jonathan.druart at biblibre.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>

commit 9e5fcb0d5dd230946719ee4825a3d41bd18effe7
Author: Kyle M Hall <kyle at bywatersolutions.com>
Date:   Thu Feb 27 08:55:22 2014 -0500

    Bug 11866: do not require special permissions to view course reserves in staff interface
    
    A librarian with no course reserves permissions cannot view course
    reserves from the staff intranet, yet can from the OPAC. This doesn't
    make much sense. Librarians should not require any course reserves
    permissions to view courses and reserves from the staff intranet.
    
    Test Plan:
    1) Log into staff intranet as a librarian with no course reserves
       permissions
    2) Note you cannot view course reserves
    3) Apply this patch
    4) Note you can now view course reserves
    5) Verify you cannot modify courses or course reserves
    
    Signed-off-by: Owen Leonard <oleonard at myacpl.org>
    
    Bug 11866 [Follow-up] Staff side course reserves too restrictive
    
    This follow-up patch adds a check for the "UseCourseReserves" system
    preference to the display of the Course reserves menu item in the
    header.
    
    To test, view the "More" menu with the "UseCourseReserves" system
    preference on and off. The menu item should appear and disappear
    accordingly.
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    Signed-off-by: Jonathan Druart <jonathan.druart at biblibre.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>

-----------------------------------------------------------------------

Summary of changes:
 course_reserves/course-reserves.pl                           |    2 +-
 koha-tmpl/intranet-tmpl/prog/en/includes/header.inc          |    2 +-
 .../prog/en/modules/course_reserves/course-details.tt        |   10 ++++++----
 .../prog/en/modules/course_reserves/course-reserves.tt       |    3 ++-
 4 files changed, 10 insertions(+), 7 deletions(-)


hooks/post-receive
-- 
main Koha release repository