Koha-clms/reports
David Cook fc4a184a5f Bug 18898 - Some permissions for Reports can be bypassed
If you manually visit the following links when you only have
permission to run reports, you'll still be able to access the ability
to create and edit reports:

/cgi-bin/koha/reports/guided_reports.pl?phase=Create%20report%20from%20SQL
/cgi-bin/koha/reports/guided_reports.pl?phase=Edit%20SQL

This patch ties these 2 unaccounted for phases to the create_reports
permission.

With patch, issue no longer can be reproduced.
Signed-off-by: Marc Véron <veron@veron.ch>

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
(cherry picked from commit 2fdfbaf0dd)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
(cherry picked from commit 4b71c92397)
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
2017-09-16 01:20:13 +02:00
..
acquisitions_stats.pl Bug 15758: Koha::Libraries - Remove GetBranches 2016-09-08 14:36:03 +00:00
bor_issues_top.pl Bug 17925: Disable debugging in reports/bor_issues_top.pl 2017-05-14 12:15:57 +02:00
borrowers_out.pl Bug 15407: Koha::Patron::Categories - replace GetborCatFromCatType 2016-09-08 13:29:22 +00:00
borrowers_stats.pl Bug 8306: Patrons statistics, fix for patron activity choice 2017-02-14 22:26:18 +01:00
cash_register_stats.pl Bug 18734 - Internal server error in cash_register_stats.pl when exporting to file 2017-06-13 22:41:29 +02:00
cat_issues_top.pl Bug 15758: [QA Follow-up] Final touch? 2016-09-08 14:36:06 +00:00
catalogue_out.pl Bug 15758: Koha::Libraries - Remove GetBranchesLoop 2016-09-08 14:36:02 +00:00
catalogue_stats.pl Bug 17642: Add and use get_descriptions_by_koha_field 2016-11-18 15:52:00 +00:00
dictionary.pl Bug 16154: CGI->multi_param - Declare a list 2016-04-26 23:16:42 +00:00
guided_reports.pl Bug 18898 - Some permissions for Reports can be bypassed 2017-09-16 01:20:13 +02:00
issues_avg_stats.pl Bug 13452: Fix for plack 2017-06-27 23:26:08 +02:00
issues_by_borrower_category.plugin Bug 15758: Koha::Libraries - Remove GetBranches 2016-09-08 14:36:03 +00:00
issues_stats.pl Bug 17642: [QA Follow-up] Issues_stats.pl is not plack safe 2016-11-18 15:52:01 +00:00
itemslost.pl Bug 15758: Koha::Libraries - Remove GetBranchesLoop 2016-09-08 14:36:02 +00:00
itemtypes.plugin Bug 15758: Koha::Libraries - Remove GetBranchesLoop 2016-09-08 14:36:02 +00:00
manager.pl Bug 16154: CGI->multi_param - Declare a list 2016-04-26 23:16:42 +00:00
orders_by_fund.pl Bug 16594: Fix obvious QA issues from bug 11371 2016-06-17 14:53:45 +00:00
reports-home.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
reserves_stats.pl Bug 17931: Remove unused vars from reserves_stats 2017-01-22 20:03:16 +01:00
serials_stats.pl Bug 15758: Koha::Libraries - Remove GetBranchesLoop 2016-09-08 14:36:02 +00:00
stats.print.pl Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
stats.screen.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00