From 387b9e863be88eac8189b4098c3a04615d25ecb3 Mon Sep 17 00:00:00 2001 From: erickson Date: Mon, 29 Sep 2008 15:26:52 +0000 Subject: [PATCH] updating org settings now requires an explicit permission per setting git-svn-id: svn://svn.open-ils.org/ILS/trunk@10725 dcc99617-32d9-48b4-a31d-7c20da2025e4 --- Open-ILS/src/perlmods/OpenILS/Application/Actor.pm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm b/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm index 7a7c2191d5..322275db32 100644 --- a/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm +++ b/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm @@ -87,12 +87,13 @@ sub set_ou_settings { my $e = new_editor(authtoken => $auth, xact => 1); return $e->die_event unless $e->checkauth; - return $e->die_event unless $e->allowed('UPDATE_ORG_SETTING', $org_id); for my $name (keys %$settings) { my $val = $$settings{$name}; my $set = $e->search_actor_org_unit_setting({org_unit => $org_id, name => $name})->[0]; + return $e->die_event unless $e->allowed("UPDATE_ORG_UNIT_SETTING.$name", $org_id); + if(defined $val) { $val = OpenSRF::Utils::JSON->perl2JSON($val); if($set) { -- 2.11.0