From 7c86cb9248d0f238713d96ad3d56b06836074fb5 Mon Sep 17 00:00:00 2001 From: Galen Charlton Date: Thu, 27 Oct 2022 21:46:43 -0400 Subject: [PATCH] LP#1977761: (follow-up) enforce use of the permission at API level Signed-off-by: Galen Charlton --- Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm b/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm index f5680f2ccb..597faa6790 100644 --- a/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm +++ b/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm @@ -1378,7 +1378,7 @@ sub process_fiscal_rollover { my $e = new_editor(xact=>1, authtoken=>$auth); return $e->die_event unless $e->checkauth; - return $e->die_event unless $e->allowed('ADMIN_FUND', $org_id); + return $e->die_event unless $e->allowed('ADMIN_FUND_ROLLOVER', $org_id); $options ||= {}; my $combined = ($self->api_name =~ /combined/); -- 2.43.2