[open-ils-commits] r10725 - trunk/Open-ILS/src/perlmods/OpenILS/Application

[svn at svn.open-ils.org]

Author: erickson
Date: 2008-09-29 11:26:52 -0400 (Mon, 29 Sep 2008)
New Revision: 10725

Modified:
   trunk/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm
Log:
updating org settings now requires an explicit permission per setting

Modified: trunk/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm
===================================================================
--- trunk/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm	2008-09-29 13:24:03 UTC (rev 10724)
+++ trunk/Open-ILS/src/perlmods/OpenILS/Application/Actor.pm	2008-09-29 15:26:52 UTC (rev 10725)
@@ -87,12 +87,13 @@
 
     my $e = new_editor(authtoken => $auth, xact => 1);
     return $e->die_event unless $e->checkauth;
-    return $e->die_event unless $e->allowed('UPDATE_ORG_SETTING', $org_id);
 
 	for my $name (keys %$settings) {
         my $val = $$settings{$name};
         my $set = $e->search_actor_org_unit_setting({org_unit => $org_id, name => $name})->[0];
 
+        return $e->die_event unless $e->allowed("UPDATE_ORG_UNIT_SETTING.$name", $org_id);
+
         if(defined $val) {
             $val = OpenSRF::Utils::JSON->perl2JSON($val);
             if($set) {