[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.11-44-g96c2ee1

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  96c2ee18ec079f76ac28e581a0b1194743a81542 (commit)
      from  5bb0978f1bff9fc1b04e072ea3bd190a32db731b (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 96c2ee18ec079f76ac28e581a0b1194743a81542
Author: Fridolin Somers <fridolin.somers at biblibre.com>
Date:   Tue Oct 11 10:00:56 2016 +0200

    Bug 17423 - patronimage.pl permission is too restrictive
    
    Bug 14566 added the permission "borrowers" on patronimage.pl.
    This perm is too restrictive because circulation pages also uses this page.
    
    I propose to simply use "catalogue" perm.
    
    Test plan
    - Set an image to borrower xx
    - Create a user with only catalogue permission
    - Log with this user
    - Go to page (replace xx by borrower number) : /cgi-bin/koha/members/patronimage.pl?borrowernumber=xx
    => Without patch you get the page saying you do not have the permission
    => With patch you get the image
    - Log out and retest the page patronimage.pl
    => You get 403 error
    
    Signed-off-by: remy <remy.gonzalves at iepg.fr>
    
    Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>
    (cherry picked from commit e78f81d615a79ad293d599c7395efcabd267662d)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit f620fbe0d9ec8c4df258dd3a35b839b466479d52)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 members/patronimage.pl |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 
main Koha release repository