[Koha-bugs] [Bug 31503] Allow several consent types on the consents tab of OPAC account page

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31503

--- Comment #45 from David Nind <david at davidnind.com> ---
Testing notes (using KTD).

The only thing I noted was:
1. If there is no GPPR_PROCESSING authorized value for PATRON_CONSENT, then in
the OPAC > your consents the text displayed is "Consent for GDPR_PROCESSING"
with Yes and No options.
2. If a GPR_PROCESSING authorized value is added without any descriptions, then
the text in [1] is displayed.
3. Is that text editable, or is that just a default that should be
changed/customised by updating the descriptions?

My attemopt at a consolidated test plan:
1. Apply patches.
2. Update database.
3. Restart all the things (flush_memcached and restart_all).
4. Run the tests - these should pass:
   - prove t/db_dependent/Koha/Patron.t
   - prove t/db_dependent/AuthorisedValues.t
5. Enable the GDPR_Policy system preference and test (add any URL for
PrivacyPolicyURL system preference, test with enforced and permissive options):
   - Go to the OPAC
   - Log in
   - You are prompted (under your consents) to "Consent for GDPR_PROCESSING"
   - Answer Yes
   - Response is "Your consent was registered on [Date/time stamp]
   - Change consent to No
   - Response is "We registered that you did not consent on [Date/time stamp]"
6. Disable the GDPR_Policy system preference - check that there is no "your
consents" section link for your account (note that there is still a page that
is accessible if you access
http://127.0.0.1:8080/cgi-bin/koha/opac-patron-consent.pl - but that you can't
do anything and the Save button is disabled).
7. Re-enable the GDPR_Policy system preference - check that there is now a
"your consents" section for your account. The previous consent should be shown.
8. Check for the new authorized value category PATRON_CONSENT. Note: Without
any values, "Consent for GDPR_PROCESSING" is the only option under your account
> your consents in the OPAC.
9. Add GDPR_PROCESSING without a Description or Description (OPAC).
10. Refresh the OPAC form. 
11. Verify that you can toggle consent/dissent and that everything is saved
correctly:
    - Note that only a real change updates the timestamp.
    - Note the text displayed for the consent [1].
12. Add a NEWSLETTER value under the authorized value category PATRON_CONSENT
without any descriptions.
13. Add a Description. Save. Refresh the OPAC consents page.
14. Add a Description (OPAC). Refresh and check the OPAC consents page again.
15. Add HTML to the OPAC description. Refresh and check the OPAC consents page
again. For example: This is some text for the <strong>newsletter
consent</strong> to <br/> display in the OPAC.
16. Verify that you can toggle consent/dissent for the NEWSLETTER and that
everything is saved correctly.

[1] Text displayed for GDPR_PROCESSING authorized value if no text enterted
into Description or Description (OPAC) in the PATRON_CONSENT authorized values.

Consent for GDPR_PROCESSING 

Please read the privacy policy. [privacy policy is linked to page URL set in
PrivacyPolicyURL]

In order to keep you logged in, we need your consent to process personal data
as specified in the EU General Data Protection Regulation of May 25, 2018. If
you would not agree, we will need to remove your account within a reasonable
time.

Do you agree with our processing of your personal data as outlined in the
policy?

Yes
No

-- 
You are receiving this mail because:
You are watching all bug changes.