evergreen:tags/rel_2_1_2_rc2

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

66c91bc... by Dan Scott on 2012-06-13

Bumping version numbers and adding Changelog

Signed-off-by: Dan Scott <email address hidden>

3957f63... by Lebbeous Fogle-Weekley <email address hidden> on 2012-06-12

Security fix: For auth, give same stacktrace for all cases of LOGIN_FAILED

Signed-off-by: Lebbeous Fogle-Weekley <email address hidden>
Signed-off-by: Bill Erickson <email address hidden>

bc98cea... by Lebbeous Fogle-Weekley <email address hidden> on 2012-06-11

Security fix: Prevent login by deleted and barred users

An existing comment in the code suggested that we thought we were already
keeping barred users out. LP #1010671 brings up that deleted users were
not being kept out.

Signed-off-by: Lebbeous Fogle-Weekley <email address hidden>
Signed-off-by: Mike Rylander <email address hidden>

a9685a9... by Jason Stephenson on 2012-06-11

Security fix for Launchpad Bug 1003052.

Bug reported by James Fournie:

Revoking the UPDATE_MARC permission doesn't actually seem to prevent a
user from editing a record. Our use case is that we would like a user
to create new records but not edit existing MARC records.

Changing CREATE_MARC to UPDATE_MARC in OpenILS::Application::Cat's
biblio_record_replace_marc() method seems to fix the problem.

Signed-off-by: Jason Stephenson <email address hidden>
Signed-off-by: Lebbeous Fogle-Weekley <email address hidden>

8799466... by Thomas Berezansky on 2012-06-13

Fix in-transit hold retarget

Tell the abort transit function to not commit our editor on us, basically.

Signed-off-by: Thomas Berezansky <email address hidden>
Signed-off-by: Lebbeous Fogle-Weekley <email address hidden>

f680171... by Jason Etheridge <email address hidden> on 2012-04-20

fix double-click in Holdings Maintenance

so that it won't attempt to spawn the Item Editor for non-items

Signed-off-by: Jason Etheridge <email address hidden>
Signed-off-by: Jason Stephenson <email address hidden>
Signed-off-by: Lebbeous Fogle-Weekley <email address hidden>

23cd9af... by James Fournie on 2012-06-06

LP1009752: activate purchase orders with patron requests

Simple typo: "actor_hold_request" should be "action_hold_request".

Signed-off-by: Dan Scott <email address hidden>

29e7e64... by Dan Scott <email address hidden> on 2012-06-07

Update 2.1.2 DB schema upgrade script

As part of the march to 2.1.2, and in time for 2.2.0, update the
2.1.1-2.1.2 update script.

Signed-off-by: Dan Scott <email address hidden>

f9773d7... by Dan Scott on 2012-06-05

Move 2.0.11 upgrade script into version_upgrade dir

Signed-off-by: Dan Scott <email address hidden>

3b847a4... by Jason Stephenson on 2012-05-10

Add the 2.0.10-2.0.11 upgrade script.

Signed-off-by: Jason Stephenson <email address hidden>
Signed-off-by: Dan Scott <email address hidden>