Fix for Bug 3140 - It is possible to email someone else's private list
authorOwen Leonard <oleonard@myacpl.org>
Tue, 17 May 2011 15:07:03 +0000 (11:07 -0400)
committerChris Cormack <chrisc@catalyst.net.nz>
Wed, 25 May 2011 21:50:52 +0000 (09:50 +1200)
commitb65f6d0a99dc13e73aed5058a44a72895c829b32
tree9fd03f2c9a88e7a2bf7d070f05f817ae0b099894
parent5984520211337750fbae0fe5a5fcba7cb85bf212
Fix for Bug 3140 - It is possible to email someone else's private list

Adding check for ShelfPossibleAction("view") to make sure the logged
in user has permission to view the selected list when downloading
or emailing a list.

Signed-off-by: Paul Poulain <paul.poulain@biblibre.com>
Signed-off-by: Ian Walls <ian.walls@bywatersolutions.com>
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
koha-tmpl/opac-tmpl/prog/en/modules/opac-downloadshelf.tt
koha-tmpl/opac-tmpl/prog/en/modules/opac-sendshelfform.tt
opac/opac-downloadshelf.pl
opac/opac-sendshelf.pl