gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/circ
History
Jonathan Druart dd4800f08d Bug 29903: Prevent messages to be deleted from unauthorised users 
The "Delete" link is hidden but the controller does not do the necessary checks.

/cgi-bin/koha/circ/del_message.pl?message_id=1&borrowernumber=5&from=moremember

Test plan:
Create a message, see the "Delete" link, don't click it but copy it
Change logged in library and use the link
If AllowAllMessageDeletion is off you should be redirected to 403

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
 		2022-02-02 21:05:29 -10:00
..
add_message.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
article-request-slip.pl Bug 27949: Allow multiple article requests print slip 2021-10-18 11:28:41 +02:00
article-requests.pl Bug 27944: Add "requested" stage in article request process 2021-10-05 10:58:14 +02:00
bookcount.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
branchoverdues.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
branchtransfers.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
checkout-notes.pl Bug 29380: Correct table name in joins to prevent errors 2021-11-03 15:40:52 +01:00
circulation-home.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
circulation.pl Bug 29637: AutoSwitchPatron should look for card number in the barcode 2021-12-07 10:33:28 -10:00
del_message.pl Bug 29903: Prevent messages to be deleted from unauthorised users 2022-02-02 21:05:29 -10:00
hold-transfer-slip.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
offline-mf.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
offline.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
on-site_checkouts.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
overdue.pl Bug 11750: (QA follow-up) Remove unconditional warn 2022-01-19 12:13:49 -10:00
pendingreserves.pl Bug 29786: Select only specific items for item level holds 2022-01-17 14:55:56 -10:00
renew.pl Bug 29380: Correct table name in joins to prevent errors 2021-11-03 15:40:52 +01:00
request-article.pl Bug 27946: Add UI handling of AR fees 2022-01-28 11:09:07 -10:00
reserveratios.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
returns.pl Bug 29865: Fix duplicate includes in circ/returns.pl 2022-01-21 21:34:51 -10:00
set-library.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
transfer-slip.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
transfers_to_send.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
transferstoreceive.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
view_holdsqueue.pl Bug 29015: Add options for itemtype, collection, and shelving location to view_holdsqueue.pl 2021-11-03 15:40:52 +01:00
waitingreserves.pl Bug 23678: Allow cancel holds in bulk 2021-10-01 16:02:58 +02:00
ysearch.pl Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00