]> git.evergreen-ils.org Git - Evergreen.git/commit
projects / Evergreen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 462d657) | patch
Security fix for Launchpad Bug 1003052.
authorJason Stephenson <jstephenson@mvlc.org>
Mon, 11 Jun 2012 20:12:54 +0000 (16:12 -0400)
committerJason Stephenson <jstephenson@mvlc.org>
Mon, 11 Jun 2012 20:12:54 +0000 (16:12 -0400)
commit1c18f452ee6fc8c00b02725fb8987ae738f22dce
treee754358bc723631abcd0464e530e953c7a224748tree
parent462d6577d6124430d814829835f39a124c696ecccommit | diff
Security fix for Launchpad Bug 1003052.

Bug reported by James Fournie:

Revoking the UPDATE_MARC permission doesn't actually seem to prevent a
user from editing a record. Our use case is that we would like a user
to create new records but not edit existing MARC records.

Changing CREATE_MARC to UPDATE_MARC in OpenILS::Application::Cat's
biblio_record_replace_marc() method seems to fix the problem.

Signed-off-by: Jason Stephenson <jstephenson@mvlc.org>
Open-ILS/src/perlmods/OpenILS/Application/Cat.pm diff | blob | history
Evergreen ILS