[koha-commits] main Koha release repository branch 3.14.x updated. v3.14.06-111-gd197d32

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.14.x has been updated
       via  d197d32daf1bb3c9577d9bbe1fc4e8003e3c737e (commit)
       via  1c05009a23f745651e9c20e5a8d1f87a7938208d (commit)
       via  026b757f5cfededb9790e41af2d51c6c7c050408 (commit)
      from  1ebb8caa3dc24e62a8c2a3b3273af84c16942981 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit d197d32daf1bb3c9577d9bbe1fc4e8003e3c737e
Author: Galen Charlton <gmc at esilibrary.com>
Date:   Mon Mar 10 14:57:17 2014 +0000

    Bug 11866: (follow-up) repair security issue introduced by main patch
    
    The main patch allows /any/ user with an account on the Koha system
    to view the staff-side course-reserves home page -- including ordinary
    patrons.  This patch repairs the oversight.
    
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>
    (cherry picked from commit e9903d760e41410bf871053ccccf00c3a037862d)
    Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>

commit 1c05009a23f745651e9c20e5a8d1f87a7938208d
Author: Jonathan Druart <jonathan.druart at biblibre.com>
Date:   Mon Mar 10 14:55:46 2014 +0100

    Bug 11866: (follow-up) ensure that empty toolbar is not displayed
    
    If a user does not have course_reserve permission, a an empty toolbar is
    displayed.
    
    Signed-off-by: Jonathan Druart <jonathan.druart at biblibre.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>
    (cherry picked from commit e2de21a943afabc1e9025266d8f1b95df4e57160)
    Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>

commit 026b757f5cfededb9790e41af2d51c6c7c050408
Author: Kyle M Hall <kyle at bywatersolutions.com>
Date:   Thu Feb 27 08:55:22 2014 -0500

    Bug 11866: do not require special permissions to view course reserves in staff interface
    
    A librarian with no course reserves permissions cannot view course
    reserves from the staff intranet, yet can from the OPAC. This doesn't
    make much sense. Librarians should not require any course reserves
    permissions to view courses and reserves from the staff intranet.
    
    Test Plan:
    1) Log into staff intranet as a librarian with no course reserves
       permissions
    2) Note you cannot view course reserves
    3) Apply this patch
    4) Note you can now view course reserves
    5) Verify you cannot modify courses or course reserves
    
    Signed-off-by: Owen Leonard <oleonard at myacpl.org>
    
    Bug 11866 [Follow-up] Staff side course reserves too restrictive
    
    This follow-up patch adds a check for the "UseCourseReserves" system
    preference to the display of the Course reserves menu item in the
    header.
    
    To test, view the "More" menu with the "UseCourseReserves" system
    preference on and off. The menu item should appear and disappear
    accordingly.
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    Signed-off-by: Jonathan Druart <jonathan.druart at biblibre.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>
    (cherry picked from commit 9e5fcb0d5dd230946719ee4825a3d41bd18effe7)
    Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 course_reserves/course-reserves.pl                           |    2 +-
 koha-tmpl/intranet-tmpl/prog/en/includes/header.inc          |    2 +-
 .../prog/en/modules/course_reserves/course-details.tt        |   10 ++++++----
 .../prog/en/modules/course_reserves/course-reserves.tt       |    3 ++-
 4 files changed, 10 insertions(+), 7 deletions(-)


hooks/post-receive
-- 
main Koha release repository