Jonathan Druart 7b00bf7ddb Bug 29542: Prevent access to private list to non authorized users ... The catalogue permission is not enough. Test plan: Create a private list owned by user A Login with user B and hit (with XX the shelfid) /cgi-bin/koha/virtualshelves/sendshelf.pl?shelfid=XX You should get an error message "You do not have sufficient permission to continue." Login with user A => You should be able to send the list Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com> (cherry picked from commit 6ca49b550e) Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net> (cherry picked from commit 2c41540b3bca62f8194b8392a283325411780ace) Signed-off-by: Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz>		2022-01-30 23:30:36 +00:00
..
addbybiblionumber.pl	Bug 24663: [19.11.x] Remove authnotrequired if set to 0	2020-08-25 15:45:46 +12:00
downloadshelf.pl	Bug 24663: [19.11.x] Remove authnotrequired if set to 0	2020-08-25 15:45:46 +12:00
sendshelf.pl	Bug 29542: Prevent access to private list to non authorized users	2022-01-30 23:30:36 +00:00
shelves.pl	Bug 24663: [19.11.x] Remove authnotrequired if set to 0	2020-08-25 15:45:46 +12:00