Check Profile Editing Perms for Card Editor

Don't allow Active/Primary card changes unless you have the ability to edit
the patron's primary profile group.

Signed-off-by: Thomas Berezansky <tsbere@mvlc.org>
Signed-off-by: Jason Etheridge <jason@esilibrary.com>

diff --git a/Open-ILS/web/js/ui/default/actor/user/register.js b/Open-ILS/web/js/ui/default/actor/user/register.js
index 42bf177..a29920a 100644 (file)
--- a/Open-ILS/web/js/ui/default/actor/user/register.js
+++ b/Open-ILS/web/js/ui/default/actor/user/register.js
@@ -240,7 +240,7 @@ function load() {
     dojo.connect(allCards, 'onClick', drawAllCards);
     if(patron.isnew()) {
         dojo.addClass(dojo.byId('uedit-all-barcodes'), 'hidden');
-    } else {
+    } else if(checkGrpAppPerm(patron.profile())) {
         new openils.User().getPermOrgList(
             'UPDATE_PATRON_ACTIVE_CARD',
             function(orgList) {