From a06fd2225b37be8a8d2349c5929bc4877b47b547 Mon Sep 17 00:00:00 2001 From: Fridolyn SOMERS Date: Wed, 27 Feb 2013 11:16:24 +0100 Subject: [PATCH] Bug 7018 : need all acq permissions to search All acquisition module permissions are needed to allow order search (acqui/histsearch.pl). With this patch any acquisition permission allows to order search. Many other pages of this module have this behavior. Test plan : - Set for a user only one permission in acquisition module (not order_receive) => they also need catalogue permission to be able to log in - Login with this user and try to perform an order search => you get access to page - Set for a user no permission in acquisition module - Login with this user and try to perform an order search => you do not get access to page Signed-off-by: MJ Ray Signed-off-by: Katrin Fischer Works as expected and passes tests. Signed-off-by: Jared Camins-Esakov --- acqui/histsearch.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/acqui/histsearch.pl b/acqui/histsearch.pl index 1ffbffeed0..971fc18fa8 100755 --- a/acqui/histsearch.pl +++ b/acqui/histsearch.pl @@ -83,7 +83,7 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user( query => $input, type => "intranet", authnotrequired => 0, - flagsrequired => { acquisition => 'group_manage', acquisition => 'order_manage', acquisition => 'order_receive' }, + flagsrequired => { acquisition => '*' }, debug => 1, } ); -- 2.20.1