[koha-commits] main Koha release repository branch master updated. v16.05.00-1050-ge78f81d

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  e78f81d615a79ad293d599c7395efcabd267662d (commit)
      from  ba8ee98e1bb3b18f579c0b122b14d43e88cda2c8 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit e78f81d615a79ad293d599c7395efcabd267662d
Author: Fridolin Somers <fridolin.somers at biblibre.com>
Date:   Tue Oct 11 10:00:56 2016 +0200

    Bug 17423 - patronimage.pl permission is too restrictive
    
    Bug 14566 added the permission "borrowers" on patronimage.pl.
    This perm is too restrictive because circulation pages also uses this page.
    
    I propose to simply use "catalogue" perm.
    
    Test plan
    - Set an image to borrower xx
    - Create a user with only catalogue permission
    - Log with this user
    - Go to page (replace xx by borrower number) : /cgi-bin/koha/members/patronimage.pl?borrowernumber=xx
    => Without patch you get the page saying you do not have the permission
    => With patch you get the image
    - Log out and retest the page patronimage.pl
    => You get 403 error
    
    Signed-off-by: remy <remy.gonzalves at iepg.fr>
    
    Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 members/patronimage.pl |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 
main Koha release repository