Bug 17109: [QA Follow-up] Die when wrong token

[koha.git] / patron_lists / list.pl

diff --git a/patron_lists/list.pl b/patron_lists/list.pl
index 217c78c..9a21681 100755 (executable)
--- a/patron_lists/list.pl
+++ b/patron_lists/list.pl
@@ -19,7 +19,7 @@
 
 use Modern::Perl;
 
-use CGI;
+use CGI qw ( -utf8 );
 
 use C4::Auth;
 use C4::Output;
@@ -32,19 +32,20 @@ my ( $template, $logged_in_user, $cookie ) = get_template_and_user(
         template_name   => "patron_lists/list.tt",
         query           => $cgi,
         type            => "intranet",
-        authnotrequired => 1,
+        authnotrequired => 0,
+        flagsrequired => { tools => 'manage_patron_lists' },
     }
 );
 
 my ($list) =
-  GetPatronLists( { patron_list_id => $cgi->param('patron_list_id') } );
+  GetPatronLists( { patron_list_id => scalar $cgi->param('patron_list_id') } );
 
-my @patrons_to_add = $cgi->param('patrons_to_add');
+my @patrons_to_add = $cgi->multi_param('patrons_to_add');
 if (@patrons_to_add) {
     AddPatronsToList( { list => $list, cardnumbers => \@patrons_to_add } );
 }
 
-my @patrons_to_remove = $cgi->param('patrons_to_remove');
+my @patrons_to_remove = $cgi->multi_param('patrons_to_remove');
 if (@patrons_to_remove) {
     DelPatronsFromList( { list => $list, patron_list_patrons => \@patrons_to_remove } );
 }