[koha-commits] main Koha release repository branch 3.20.x updated. v3.20.01-6-gdd8d7b1

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.20.x has been updated
       via  dd8d7b1b6fdfb12c1277babd78bc93e01fe7566b (commit)
       via  3d8af819a84847b35ad08e62ba137d3febd878dd (commit)
       via  42024a93c8d5074bf287cdf000f2752baefc62b2 (commit)
       via  a5a83285dac791df92e90c1540c36fc3a2a8606a (commit)
      from  af52d82223bdb75bd38cd91799f61fce880fdd45 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit dd8d7b1b6fdfb12c1277babd78bc93e01fe7566b
Author: Jonathan Druart <jonathan.druart at koha-community.org>
Date:   Wed Jun 24 11:03:22 2015 +0200

    Bug 14440: get_template_and_user can not have an empty template_name (quote*_ajax.pl)
    
    This patch uses check_api_auth instead of get_template_and_user.
    
    Test plan:
    Confirm that you are still able to access to the quote editor with the
    edit_quotes permission.
    Confirm that you are not if you don't have the permission.
    
    wget your_url/cgi-bin/koha/tools/quotes/quotes_ajax.pl
    should return "403 : Forbidden."
    
    Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg at gmail.com>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at theke.io>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit 08871a324fa731ffdbbe87afde1ee145c604a22b)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 3d8af819a84847b35ad08e62ba137d3febd878dd
Author: Fridolin Somers <fridolin.somers at biblibre.com>
Date:   Tue Jun 23 17:45:30 2015 +0200

    Bug 14440: get_template_and_user can not have an empty template_name (opac-ratings.pl)
    
    Since Bug 14408, the method get_template_and_user can not have an empty template_name.
    Pages calling with an empty value should use C4::Auth::checkauth()
    
    This patch corrects opac/opac-ratings.pl
    
    Test plan :
    - Apply patch
    - Set sysopref OpacStarRatings to 'results and details'
    - Disable Javascipt on your browser (otherwise it will use ajax)
    - Login at OPAC
    - Go to a record
    - Click on a button left of 'Rate me' to choose a rating, ie 4
    - Click on 'Rate me'
    => The page is reloaded and you see 'your rating: 4'
    - Loggout from OPAC
    - Try to access URL : http://<serveur>/cgi-bin/koha/opac-ratings.pl
    => You see the loggin page
    
    Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg at gmail.com>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at theke.io>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit f1acb5615d0cbcba5db5b84e12fbad3d41454347)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 42024a93c8d5074bf287cdf000f2752baefc62b2
Author: Fridolin Somers <fridolin.somers at biblibre.com>
Date:   Tue Jun 23 16:45:21 2015 +0200

    Bug 14440: get_template_and_user can not have an empty template_name (updatesupplier.pl)
    
    Since Bug 14408, the method get_template_and_user can not have an empty template_name.
    Pages calling with an empty value should use C4::Auth::checkauth()
    
    This patch corrects acqui/updatesupplier.pl
    
    Test plan :
    - Apply patch
    - Connect to intranet with a user having "vendors_manage" permission
    - Go to acquisition module
    - Create a new vendor
    - Click on "Edit vendor"
    - Change some information and save
    => Your change is saved
    - Connect to intranet with a user not having "vendors_manage" permission
    - Try to access <intranet>/cgi-bin/koha/acqui/updatesupplier.pl
    => Access is denied
    - Disconnect from intranet
    - Try to access <intranet>/cgi-bin/koha/acqui/updatesupplier.pl
    => Access is denied
    
    Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg at gmail.com>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at theke.io>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit 015c26a5e36dae5070eab57f400237715d93ae44)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit a5a83285dac791df92e90c1540c36fc3a2a8606a
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Fri Jun 26 09:07:58 2015 +1200

    Revert "bug 14440 - work around for empty tt filenames"
    
    This reverts commit dd5cf241cb9f867d9c85e6e40685f2ccd9ff5e3d.

-----------------------------------------------------------------------

Summary of changes:
 acqui/updatesupplier.pl                            |   11 ++--------
 .../opac-tmpl/bootstrap/en/modules/opac-detail.tt  |    1 -
 opac/opac-ratings.pl                               |   22 ++++++--------------
 tools/quotes/quotes-upload_ajax.pl                 |   16 ++++++--------
 tools/quotes/quotes_ajax.pl                        |   16 ++++++--------
 5 files changed, 20 insertions(+), 46 deletions(-)


hooks/post-receive
-- 
main Koha release repository