From: Bill Erickson <berickxx@gmail.com>
Date: Wed, 27 Jan 2016 16:46:17 +0000 (-0500)
Subject: LP#1468422 Login permission checks are global
X-Git-Tag: sprint4-merge-nov22~521
X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=493302324c114e2a84ce6f11b14c3247334a2d7a;p=working%2FEvergreen.git

LP#1468422 Login permission checks are global

For backwards compat, perform all login permission checks using the root
org unit as the context org unit.

Signed-off-by: Bill Erickson <berickxx@gmail.com>
Signed-off-by: Dan Wells <dbw2@calvin.edu>
---

diff --git a/Open-ILS/src/c-apps/oils_auth_internal.c b/Open-ILS/src/c-apps/oils_auth_internal.c
index a6dba099cd..c64a6c0763 100644
--- a/Open-ILS/src/c-apps/oils_auth_internal.c
+++ b/Open-ILS/src/c-apps/oils_auth_internal.c
@@ -232,6 +232,10 @@ static oilsEvent* oilsAuthVerifyWorkstation(
 static oilsEvent* oilsAuthCheckLoginPerm(osrfMethodContext* ctx, 
     int user_id, int org_id, const char* type ) {
 
+    // For backwards compatibility, check all login permissions 
+    // using the root org unit as the context org unit.
+    org_id = -1;
+
     char* perms[1];
 
     if (!strcasecmp(type, OILS_AUTH_OPAC)) {