]> git.evergreen-ils.org Git - Evergreen.git/commit
LP#16663435 - Stripe org settings lack view permissions.
authorChris Sharp <csharp@georgialibraries.org>
Tue, 14 Feb 2017 18:27:31 +0000 (13:27 -0500)
committerGalen Charlton <gmc@equinoxinitiative.org>
Thu, 16 Feb 2017 17:21:17 +0000 (12:21 -0500)
commitc1c1011dafdc2e0132cd8a3d671e07e28eadb493
tree14d77856464d91f6386312b66a1ed898c4b1dfe8
parent65646160516a2168fe2f774e7b60ca82b05d75ff
LP#16663435 - Stripe org settings lack view permissions.

Unprivileged users can retrieve organizational unit setting values
for setting types lacking a "view" permission.  When the feature adding
Stripe credit card processing was added, the upgrade script neglected to
add the VIEW_CREDIT_CARD_PROCESSING permission to the organizational unit
setting type (which was included in 0396.data.org-setting-payflowpro.sql).

Fresh installs are not affected, but anyone who upgraded through 0863.data.stripe-payments.sql
(included in the 2.5.3-2.6.0-upgrade-db.sql version upgrade script) and is
using Stripe credit card processing should run this script.

Signed-off-by: Chris Sharp <csharp@georgialibraries.org>
Signed-off-by: Jason Stephenson <jason@sigio.com>
Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>
Open-ILS/src/sql/Pg/upgrade/XXXX.data.coust_view_perms_stripe.sql [new file with mode: 0644]