[Koha-patches] [PATCH 2/2] Bug 6643 -- Able to download patron card batches as an unauthorized user
Liz Rea
lrea at nekls.org
Thu Jul 28 23:02:45 CEST 2011
Making sure permissions are checked on label creator
---
patroncards/create-pdf.pl | 11 +++++++++++
1 files changed, 11 insertions(+), 0 deletions(-)
diff --git a/patroncards/create-pdf.pl b/patroncards/create-pdf.pl
index f063e9b..961dfbf 100755
--- a/patroncards/create-pdf.pl
+++ b/patroncards/create-pdf.pl
@@ -21,6 +21,7 @@ use strict;
use warnings;
use CGI;
+use C4::Auth;
use Graphics::Magick;
use XML::Simple;
use POSIX qw(ceil);
@@ -34,6 +35,16 @@ use C4::Patroncards 1.000000;
my $cgi = new CGI;
+my ( $template, $loggedinuser, $cookie ) = get_template_and_user({
+ template_name => "labels/label-home.tt",
+ query => $cgi,
+ type => "intranet",
+ authnotrequired => 0,
+ flagsrequired => { tools => 'label_creator' },
+ debug => 1,
+ });
+
+
my $batch_id = $cgi->param('batch_id') if $cgi->param('batch_id');
my $template_id = $cgi->param('template_id') || undef;
my $layout_id = $cgi->param('layout_id') || undef;
--
1.7.2.5
More information about the Koha-patches
mailing list