LP#1446860 Staff were able to edit their own accounts.
authorChris Sharp <csharp@georgialibraries.org>
Tue, 21 Apr 2015 21:10:49 +0000 (17:10 -0400)
committerChris Sharp <csharp@georgialibraries.org>
Mon, 10 Oct 2016 12:26:48 +0000 (08:26 -0400)
This change reverses what appears to be a thinko in the
original programming.  If the editing user is the same
as the user being edited, disable the Save button.

Signed-off-by: Chris Sharp <csharp@georgialibraries.org>
Conflicts:
Open-ILS/web/js/ui/default/actor/user/register.js

Open-ILS/web/js/ui/default/actor/user/register.js

index 210e24e..9f58afc 100644 (file)
@@ -302,7 +302,7 @@ function load() {
 
        dojo.connect(setExpireDate, 'onClick', setExpireDateHandler);
 
-    if(!patron.isnew() && !checkGrpAppPerm(patron.profile()) || patron.id() == openils.User.user.id()) {
+    if(!patron.isnew() && !checkGrpAppPerm(patron.profile()) && patron.id() == openils.User.user.id()) {
         // we are not allowed to edit this user, so disable the save option
         saveButton.attr('disabled', true);
         saveCloneButton.attr('disabled', true);