May 2012 - Koha-bugs - lists.koha-community.org

[Bug 7083] New: Show creator name on list of public lists
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7083 Bug #: 7083 Summary: Show creator name on list of public lists Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All URL: /cgi-bin/koha/virtualshelves/shelves.pl OS/Version: All Status: ASSIGNED Severity: enhancement Priority: P5 Component: Virtual Shelves AssignedTo: oleonard(a)myacpl.org ReportedBy: oleonard(a)myacpl.org QAContact: koha-bugs(a)lists.koha-community.org The list of public lists in the staff client should show which patron is the creator of the list. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 11

[Bug 7435] New: An inactive fund is selected a default in neworderempty.pl
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7435 Bug #: 7435 Summary: An inactive fund is selected a default in neworderempty.pl Classification: Unclassified Change sponsored?: --- Product: Koha Version: unspecified Platform: All OS/Version: All Status: ASSIGNED Severity: minor Priority: P5 - low Component: Acquisitions AssignedTo: adrien.saurat(a)biblibre.com ReportedBy: adrien.saurat(a)biblibre.com QAContact: ian.walls(a)bywatersolutions.com When making a new order in the neworderempty page ( Home › Acquisitions › *budget* › Basket X › New order ), in some cases the "Fund" select box display a fund which should be hidden. Here is an excerpt from the HTML code of a problematic case: <select id="budget_id" onchange="fetchSortDropbox(this.form)" size="1" name="budget_id"> <option value="1" class="b_inactive" style="display : none;">fond test A1</option> <option value="2" class="b_inactive" style="display : none;">fond test A2</option> <option value="3" class="b_inactive" style="display : none;">test fond B1</option> <option value="4" class="b_inactive" style="display : none;">test fond A0 à rendre inactif</option> <option value="5">poste 3a</option> <option value="6">poste 3b</option> <option value="7">poste budgetaire #2-A</option> </select> In this case, "fond test A1" should be hidden, but it's actually displayed as the default choice. The CSS hiding is not functionning properly. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 12

[Bug 7357] New: Subscriptions titles are replaced by "---" when duplicated
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7357 Bug #: 7357 Summary: Subscriptions titles are replaced by "---" when duplicated Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Serials AssignedTo: adrien.saurat(a)biblibre.com ReportedBy: adrien.saurat(a)biblibre.com QAContact: ian.walls(a)bywatersolutions.com If we have one subscription with the title "Example", it's correctly displayed in the "Serials subscriptions" result page. But if several subscriptions are made for the same serial (different locations for exemple), then the first one is displayed completely but in the following lines, the title is replaced by '---'. It was implemented this way in order to avoid repetitions and make things clearer, but in fact some users are confused by this behaviour. It would probably be better to display each line with a full title. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 11

[Bug 6947] New: OPAC top-issues doesn't respect item-level itypes
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6947 Bug #: 6947 Summary: OPAC top-issues doesn't respect item-level itypes Classification: Unclassified Change sponsored?: --- Product: Koha Version: Rel_3_8 Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 Component: OPAC AssignedTo: ian.walls(a)bywatersolutions.com ReportedBy: ian.walls(a)bywatersolutions.com QAContact: koha-bugs(a)lists.koha-community.org If AdvancedSearchTypes is 'itemtypes', then opac/opac-topissues.pl only looks at the biblioitems.itemtype value for it's grouping, not the item-level itype, even if that item-level_itypes is turned on. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 8

[Bug 7028] New: koha-conf.xml template that comes with the packages needs updating
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7028 Bug #: 7028 Summary: koha-conf.xml template that comes with the packages needs updating Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Packaging AssignedTo: robin(a)catalyst.net.nz ReportedBy: robin(a)catalyst.net.nz QAContact: koha-bugs(a)lists.koha-community.org It's been unchanged for a while. In particular it's missing the <server id="publicserver" listenref="publicserver"> ...<serverinfo id="publicserver"> part. It should be brought up to match the conf file that koha installs. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 7

[Bug 6783] New: Circulation restrictions dont work when other withdrawn reasons are used
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6783 Bug #: 6783 Summary: Circulation restrictions dont work when other withdrawn reasons are used Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Circulation AssignedTo: kyle.m.hall(a)gmail.com ReportedBy: savitra.sirohi(a)osslabs.biz QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com Circulation restrictions work only when withdrawn reason (value 1) is selected. If ones sets up other withdrawn reasons using authorized values, and selects one of them (e.g. value 2), circulation restrictions don't work. This changes fixes this problem. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 12

[Bug 6994] New: 'No budget defined' showing up although budgets and funds are defined
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6994 Bug #: 6994 Summary: 'No budget defined' showing up although budgets and funds are defined Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Acquisitions AssignedTo: henridamien(a)koha-fr.org ReportedBy: katrin.fischer(a)bsz-bw.de QAContact: koha-bugs(a)lists.koha-community.org Created attachment 5815 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=5815 screenshot of error message You can't create any orders unless you first define a budget and a fund. Information to reproduce: - budget and funds are defined - ordering in general works - warning shows up when search for existing record from basket gives no results -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 12

[Bug 7323] New: Javascript error when editing list
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7323 Bug #: 7323 Summary: Javascript error when editing list Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All URL: /cgi-bin/koha/virtualshelves/shelves.pl?shelfnumber=XX &op=modif OS/Version: All Status: ASSIGNED Severity: minor Priority: P5 - low Component: Virtual Shelves AssignedTo: oleonard(a)myacpl.org ReportedBy: oleonard(a)myacpl.org QAContact: ian.walls(a)bywatersolutions.com Firebug reports an error when editing a list in the staff client: f.addshelf is undefined Line 186 -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 6

[Bug 6628] New: [security] help system use insecure REFERRER for file inclusion
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6628 Bug #: 6628 Summary: [security] help system use insecure REFERRER for file inclusion Classification: Unclassified Change sponsored?: --- Product: Koha Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Architecture, internals, and plumbing AssignedTo: gmcharlt(a)gmail.com ReportedBy: semarie-koha(a)latrappe.fr QAContact: koha-bugs(a)lists.koha-community.org The 'help.pl' use REFERRER HTTP-Header for determine which template should be displayed to user. This HTTP-Header could be forged by user. CWE-73: External Control of File Name or Path (see http://cwe.mitre.org/data/definitions/73.html) The template name is extracted from REFERRER which regex: > our $refer = $query->referer(); > $refer =~ /koha\/(.*)\.pl/; > my $from = "modules/help/$1.tt"; So it is possible to have a referer like: http://xxx/koha/EVIL-THING.plxxx and $from should be egal to "modules/help/EVIL-THING.tt" Some suggestions: - It should be better to have a better regex for extract the help template: like only allow a-zA-Z, '-' and '/' (not including '.' [for ".."], but including '/' for help templates like "members/boraccount.tt") - It will be better to rename all help templates from: "members/boraccount.tt" to "members-boraccount.tt", in order to remove need of '/' in regex. And all '/' in value taken from referer must be remplaced by '-'. ('-' in path is less worst than '/'). -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 17

[Bug 6776] New: Add Checkin tab to patron search tool
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6776 Bug #: 6776 Summary: Add Checkin tab to patron search tool Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Circulation AssignedTo: kyle.m.hall(a)gmail.com ReportedBy: savitra.sirohi(a)osslabs.biz QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com Add check-in as an option in patron-search.inc, thus allowing a checkin tab to be available in several patron and circulation pages -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 20