From: Galen Charlton <gmc@equinoxOLI.org>
Date: Fri, 28 Oct 2022 01:46:43 +0000 (-0400)
Subject: LP#1977761: (follow-up) enforce use of the permission at API level
X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=7c86cb9248d0f238713d96ad3d56b06836074fb5;p=evergreen%2Fpines.git

LP#1977761: (follow-up) enforce use of the permission at API level

Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>
---

diff --git a/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm b/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm
index f5680f2ccb..597faa6790 100644
--- a/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm
+++ b/Open-ILS/src/perlmods/lib/OpenILS/Application/Acq/Financials.pm
@@ -1378,7 +1378,7 @@ sub process_fiscal_rollover {
 
     my $e = new_editor(xact=>1, authtoken=>$auth);
     return $e->die_event unless $e->checkauth;
-    return $e->die_event unless $e->allowed('ADMIN_FUND', $org_id);
+    return $e->die_event unless $e->allowed('ADMIN_FUND_ROLLOVER', $org_id);
     $options ||= {};
 
     my $combined = ($self->api_name =~ /combined/);