projects / koha.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 396f998)
fixed permissions for updateitem
authorGalen Charlton <galen.charlton@liblime.com>
Mon, 21 Jan 2008 20:20:46 +0000 (14:20 -0600)
committerJoshua Ferraro <jmf@liblime.com>
Wed, 23 Jan 2008 04:09:01 +0000 (22:09 -0600)
Per new bug 1783, it would be nice if editcatalogue would
work as well, but a change to the public API of C4::Auth
is needed for that to work.

Signed-off-by: Chris Cormack <crc@liblime.com>
Signed-off-by: Joshua Ferraro <jmf@liblime.com>
catalogue/updateitem.pl patch | blob | history
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tmpl patch | blob | history

diff --git a/catalogue/updateitem.pl b/catalogue/updateitem.pl
index 7afc55a..d48f845 100755 (executable)
--- a/catalogue/updateitem.pl
+++ b/catalogue/updateitem.pl
@@ -20,6 +20,7 @@
 use strict; 
 use warnings;
 use CGI;
+use C4::Auth;
 use C4::Context;
 use C4::Biblio;
 use C4::Items;
@@ -30,6 +31,8 @@ use C4::Reserves;
 
 my $cgi= new CGI;
 
+my ($loggedinuser, $cookie, $sessionID) = checkauth($cgi, 0, {circulate => 1}, 'intranet');
+
 my $biblionumber=$cgi->param('biblionumber');
 my $itemnumber=$cgi->param('itemnumber');
 my $biblioitemnumber=$cgi->param('biblioitemnumber');
diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tmpl b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tmpl
index ea6d813..3304aad 100644 (file)
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tmpl
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tmpl
@@ -62,56 +62,76 @@
             <li><span class="label">Current Location:</span> <!-- TMPL_VAR NAME="holdingbranchname" -->&nbsp;</li>
             <li><span class="label">Circulation Status:</span> <!-- TMPL_IF NAME="issue" -->Checked out to <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=<!-- TMPL_VAR NAME="borrowernumber" -->"><!-- TMPL_VAR NAME="cardnumber" --></a>, Due back on <!-- TMPL_VAR NAME="onloan" --><!-- TMPL_ELSE -->Not Checked out <!-- /TMPL_IF --></li>
             <li><span class="label">Lost Status:</span>
-                <form action="updateitem.pl" method="post">
-                <input type="hidden" name="biblionumber" value="<!-- TMPL_VAR Name="biblionumber" -->" />
-                <input type="hidden" name="biblioitemnumber" value="<!-- TMPL_VAR Name="biblioitemnumber" -->" />
-                <input type="hidden" name="itemnumber" value="<!-- TMPL_VAR Name="itemnumber" -->" />
-                <select name="itemlost" >
-        <!-- TMPL_LOOP NAME="itemlostloop" -->
-            <!-- TMPL_IF NAME="selected" -->
-                    <option value="<!-- TMPL_VAR NAME="authorised_value" -->" selected="selected"><!-- TMPL_VAR NAME="lib" --></option>
-            <!-- TMPL_ELSE -->
-                    <option value="<!-- TMPL_VAR NAME="authorised_value" -->"><!-- TMPL_VAR NAME="lib" --></option>
-            <!-- /TMPL_IF -->
-        <!-- /TMPL_LOOP -->
-                </select>
-                <input type="hidden" name="wthdrawn" value="<!-- TMPL_VAR NAME="wthdrawn" -->" />
-                <input type="hidden" name="damaged" value="<!-- TMPL_VAR NAME="damaged" -->" />
-                <input type="submit" name="submit" class="submit" value="Set Status" /></form>
+                <!-- TMPL_IF NAME="CAN_user_circulate" -->
+                    <form action="updateitem.pl" method="post">
+                    <input type="hidden" name="biblionumber" value="<!-- TMPL_VAR Name="biblionumber" -->" />
+                    <input type="hidden" name="biblioitemnumber" value="<!-- TMPL_VAR Name="biblioitemnumber" -->" />
+                    <input type="hidden" name="itemnumber" value="<!-- TMPL_VAR Name="itemnumber" -->" />
+                    <select name="itemlost" >
+            <!-- TMPL_LOOP NAME="itemlostloop" -->
+                <!-- TMPL_IF NAME="selected" -->
+                        <option value="<!-- TMPL_VAR NAME="authorised_value" -->" selected="selected"><!-- TMPL_VAR NAME="lib" --></option>
+                <!-- TMPL_ELSE -->
+                        <option value="<!-- TMPL_VAR NAME="authorised_value" -->"><!-- TMPL_VAR NAME="lib" --></option>
+                <!-- /TMPL_IF -->
+            <!-- /TMPL_LOOP -->
+                    </select>
+                    <input type="hidden" name="wthdrawn" value="<!-- TMPL_VAR NAME="wthdrawn" -->" />
+                    <input type="hidden" name="damaged" value="<!-- TMPL_VAR NAME="damaged" -->" />
+                    <input type="submit" name="submit" class="submit" value="Set Status" /></form>
+                <!-- TMPL_ELSE -->
+                    <!-- TMPL_LOOP NAME="itemlostloop" -->
+                        <!-- TMPL_IF NAME="selected" -->
+                            <!-- TMPL_VAR NAME="lib" -->
+                        <!-- /TMPL_IF -->
+                    <!-- /TMPL_LOOP -->
+                    &nbsp;
+                <!-- /TMPL_IF -->
             </li>
             <li><span class="label">Damaged Status:</span>
-                <form action="updateitem.pl" method="post">
-                <input type="hidden" name="biblionumber" value="<!-- TMPL_VAR Name="biblionumber" -->" />
-                <input type="hidden" name="biblioitemnumber" value="<!-- TMPL_VAR Name="biblioitemnumber" -->" />
-                <input type="hidden" name="itemnumber" value="<!-- TMPL_VAR Name="itemnumber" -->" />
-                <select name="damaged" >
-        <!-- TMPL_LOOP NAME="itemdamagedloop" -->
-            <!-- TMPL_IF NAME="selected" -->
-                <option value="<!-- TMPL_VAR NAME="authorised_value" -->" selected="selected"><!-- TMPL_VAR NAME="lib" --></option>
-            <!-- TMPL_ELSE -->
-                <option value="<!-- TMPL_VAR NAME="authorised_value" -->"><!-- TMPL_VAR NAME="lib" --></option>
-            <!-- /TMPL_IF -->
-        <!-- /TMPL_LOOP -->
-                </select>
-                <input type="hidden" name="wthdrawn" value="<!-- TMPL_VAR NAME="wthdrawn" -->" />
-                <input type="hidden" name="itemlost" value="<!-- TMPL_VAR NAME="itemlost" -->" />
-                <input type="submit" name="submit" class="submit" value="Set Status" /></form>
+                <!-- TMPL_IF NAME="CAN_user_circulate" -->
+                    <form action="updateitem.pl" method="post">
+                    <input type="hidden" name="biblionumber" value="<!-- TMPL_VAR Name="biblionumber" -->" />
+                    <input type="hidden" name="biblioitemnumber" value="<!-- TMPL_VAR Name="biblioitemnumber" -->" />
+                    <input type="hidden" name="itemnumber" value="<!-- TMPL_VAR Name="itemnumber" -->" />
+                    <select name="damaged" >
+            <!-- TMPL_LOOP NAME="itemdamagedloop" -->
+                <!-- TMPL_IF NAME="selected" -->
+                    <option value="<!-- TMPL_VAR NAME="authorised_value" -->" selected="selected"><!-- TMPL_VAR NAME="lib" --></option>
+                <!-- TMPL_ELSE -->
+                    <option value="<!-- TMPL_VAR NAME="authorised_value" -->"><!-- TMPL_VAR NAME="lib" --></option>
+                <!-- /TMPL_IF -->
+            <!-- /TMPL_LOOP -->
+                    </select>
+                    <input type="hidden" name="wthdrawn" value="<!-- TMPL_VAR NAME="wthdrawn" -->" />
+                    <input type="hidden" name="itemlost" value="<!-- TMPL_VAR NAME="itemlost" -->" />
+                    <input type="submit" name="submit" class="submit" value="Set Status" /></form>
+                <!-- TMPL_ELSE -->
+                    <!-- TMPL_LOOP NAME="itemdamagedloop" -->
+                        <!-- TMPL_IF NAME="selected" -->
+                            <!-- TMPL_VAR NAME="lib" -->
+                        <!-- /TMPL_IF -->
+                    <!-- /TMPL_LOOP -->
+                    &nbsp;
+                <!-- /TMPL_IF -->
             </li>
             <li><span class="label">Withdrawn?:</span><!-- TMPL_IF NAME="wthdrawn" -->Yes<!-- TMPL_ELSE -->No<!-- /TMPL_IF -->
-                <form action="updateitem.pl" method="post">
-                <input type="hidden" name="biblionumber" value="<!-- TMPL_VAR Name="biblionumber" -->" />
-                <input type="hidden" name="biblioitemnumber" value="<!-- TMPL_VAR Name="biblioitemnumber" -->" />
-                <input type="hidden" name="itemnumber" value="<!-- TMPL_VAR Name="itemnumber" -->" />
-                <input type="hidden" name="itemlost" value="<!-- TMPL_VAR NAME="itemlost" -->" />
-                <input type="hidden" name="damaged" value="<!-- TMPL_VAR NAME="damaged" -->" />
+                <!-- TMPL_IF NAME="CAN_user_circulate" -->
+                    <form action="updateitem.pl" method="post">
+                    <input type="hidden" name="biblionumber" value="<!-- TMPL_VAR Name="biblionumber" -->" />
+                    <input type="hidden" name="biblioitemnumber" value="<!-- TMPL_VAR Name="biblioitemnumber" -->" />
+                    <input type="hidden" name="itemnumber" value="<!-- TMPL_VAR Name="itemnumber" -->" />
+                    <input type="hidden" name="itemlost" value="<!-- TMPL_VAR NAME="itemlost" -->" />
+                    <input type="hidden" name="damaged" value="<!-- TMPL_VAR NAME="damaged" -->" />
 
-        <!-- TMPL_IF NAME="wthdrawn" -->
-                <input type="hidden" name="wthdrawn" value="0" /><!-- TMPL_ELSE --><input type="hidden" name="wthdrawn" value="1" />
-        <!-- /TMPL_IF -->
-        <!-- TMPL_IF NAME="wthdrawn" -->
-                <input type="submit" name="submit" class="submit" value="Restore" /><!-- TMPL_ELSE --><input type="submit" name="submit" class="submit" value="Withdraw" />
-        <!-- /TMPL_IF -->
-                </form>
+            <!-- TMPL_IF NAME="wthdrawn" -->
+                    <input type="hidden" name="wthdrawn" value="0" /><!-- TMPL_ELSE --><input type="hidden" name="wthdrawn" value="1" />
+            <!-- /TMPL_IF -->
+            <!-- TMPL_IF NAME="wthdrawn" -->
+                    <input type="submit" name="submit" class="submit" value="Restore" /><!-- TMPL_ELSE --><input type="submit" name="submit" class="submit" value="Withdraw" />
+            <!-- /TMPL_IF -->
+                    </form>
+                <!-- /TMPL_IF -->
             </li>
             </ol></div>
             <div class="listgroup"><h4>History</h4>
@@ -131,11 +151,17 @@
                <!-- TMPL_IF NAME="card2" --><li><span class="label">Previous Borrower:</span> <a href="/cgi-bin/koha/circ/circulation.pl?borrowernumber=<!-- TMPL_VAR NAME="borrower2" -->"><!-- TMPL_VAR NAME="card2" --></a>&nbsp;</li><!-- /TMPL_IF -->
                 <li><span class="label">Paid for?:</span> <!-- TMPL_VAR NAME="paidfor" -->&nbsp;</li>
             <li><span class="label">Public Note:</span>
+                <!-- TMPL_IF NAME="CAN_user_circulate" -->
               <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="<!-- TMPL_VAR Name="biblionumber" -->" />
                     <input type="hidden" name="biblioitemnumber" value="<!-- TMPL_VAR Name="biblioitemnumber" -->" /><input type="hidden" name="itemnumber" value="<!-- TMPL_VAR Name="itemnumber" -->" />
                     <textarea name="itemnotes" rows="2" cols="30"><!-- TMPL_VAR NAME="itemnotes" --></textarea><input type="submit" name="submit" class="submit" value="Update" /> 
                 </li>
-            </ol></form></div>
+            </ol></form>
+                <!-- TMPL_ELSE -->
+                    <!-- TMPL_VAR NAME="itemnotes" -->
+                    &nbsp;
+                <!-- /TMPL_IF -->
+            </div>
 </div>
 <!-- /TMPL_LOOP -->
 
Koha ILS @ FFZG - based on git://git.koha.org/pub/scm/koha.git