June 2015 - Koha-bugs - lists.koha-community.org

[Bug 14323] New: Users who share userid and cardnumber cause Privacy Breach
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14323 Bug ID: 14323 Summary: Users who share userid and cardnumber cause Privacy Breach Change sponsored?: --- Product: Koha Version: 3.18 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: gmcharlt(a)gmail.com Reporter: joy(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org For Patron log in on the OPAC Koha looks at the userid first and tries to authenticate and then looks at the barcode to find a match. Problem: If you have user1 with a cardnumber that is the userid for user2 and they have the same password Scenario: User1: cardnumber: user1card userid: user1 pwd:changeme User2: cardnumber: user2card userid: user1card pwd:changeme This scenario is a tad unlikely but think about it in a migration perspective. If we have a library with 4 digit cardnumbers and we are making the userid the last four digits of their phone number and we assign a default password to everyone. There's the potential for failure When user1 logs in with his cardnumber s/he is taken to user2's account. Breach of patron privacy. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13664] New: Add password strength plugin
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13664 Bug ID: 13664 Summary: Add password strength plugin Change sponsored?: --- Product: Koha Version: 3.18 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: david.roberts(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Add password strength plugin using complexify. This should be linked to system preferences, and apply to both staff and public logins. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 80

[Bug 14320] New: Improve the speed of the checkouts table loading items with many holds and items using AllowRenewalIfOtherItemsAvailable
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14320 Bug ID: 14320 Summary: Improve the speed of the checkouts table loading items with many holds and items using AllowRenewalIfOtherItemsAvailable Change sponsored?: --- Product: Koha Version: 3.18 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com The feature AllowRenewalIfOtherItemsAvailable can take a tremendous amount of processing for records with large numbers of holds and/or items. For example, for a record with 50 items and 100 holds we must call a series of subroutines 5000 times! The loop this processing takes place in has an outer loop of borrowers and an inner loop of items. However, two of the three subroutines only need an itemnumber. So, if we move the items loop to be the outer loop, we can 'cache' these subroutine calls and vastly improve the speed of the subroutine. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 3206] OAI repositry deleted record support
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3206 Gaetan Boisson <gaetan.boisson(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gaetan.boisson(a)biblibre.com --- Comment #15 from Gaetan Boisson <gaetan.boisson(a)biblibre.com> --- Jonathan, i think the "no" option (and the whole syspref) is there to stick to the OAI standard: http://www.openarchives.org/OAI/openarchivesprotocol.html#DeletedRecords My understanding is that the transient, persistent or no status, is more a result of how you administer your database than one of the choice you made in this syspref. I'd say it's here so that the server communicates the right value to harvesters. Default value should be persistent, since the deletedbiblio table can only be emptied manually if the administrator does so. So transient would be "i do that from time to time" and 'no' would be "i never ever let anything go in this table". -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3333] item status for "not for loan" by item type / item is different
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3333 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #39742|0 |1 is obsolete| | --- Comment #6 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 39807 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=39807&action=edit Bug 3333: Confusing item status for not-for-loans This patch makes a tiny change in C4::Search::searchResults as to the handling of not-for-loans. This should make the display of status and availability of items more consistent in opac and staff. Additionally, a Place hold link should disappear in the opac, when it is not possible to place a hold on any item of one biblio. The following spots need special attention; the display should be corrected by this patch: [A] Location column showing number of available items in catalogue/search. [B] Location column of Cataloging Search (addbooks.pl) [C] OPAC Search results list in non-XSLT view. NOTE The forms opac-MARCdetail and MARCdetail also include an Items table with column Not for loan. The information in this column might still be somewhat confusing but is actually correct. The column only contains Not for loan if the item field is set. So it is empty when only the item type is nfl. Since a correction here is arguable, I am not including it on this report. Test plan: [1] Have at least two item types. Mark one item type (X) as not for loan. [2] Use at least two biblios with two items each. Mark one item of the first biblio as not for loan at item level (via item editor). Change one item of the second biblio to the item type of step 1 (X). [3] Set pref item-level_itypes==item and set all four xslt prefs (for opac and staff, results and detail) to default. [4] Check spots A, B and C as mentioned above. Also check: [D] OPAC Detail, Holdings table, Status column [E] Staff Detail, Holdings, Status. [5] Make all four xslt prefs now empty. Check spots A to E again. Especially observe C here. [6] Set pref item-level_itypes==biblio. Change your second biblio to item type of step 1 (X) in the cataloguing editor (MARC 942c). Check spots A to E again. [7] Set all four xslt prefs again to default. Check spots A to E again. [8] Run the unit test t/db_dependent/Search.t. -- You are receiving this mail because: You are watching all bug changes. You are the QA Contact for the bug.

1 0

[Bug 3333] item status for "not for loan" by item type / item is different
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3333 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Patch complexity|--- |Small patch Status|ASSIGNED |Needs Signoff -- You are receiving this mail because: You are watching all bug changes. You are the QA Contact for the bug.

1 0

[Bug 13219] New: Add graphs to guided reports
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13219 Bug ID: 13219 Summary: Add graphs to guided reports Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Reports Assignee: gmcharlt(a)gmail.com Reporter: martin.renvoize(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: chris(a)bigballofwax.co.nz, fridolyn.somers(a)biblibre.com, gmcharlt(a)gmail.com, julien.sicot(a)gmail.com, katrin.fischer(a)bsz-bw.de, martin.renvoize(a)ptfs-europe.com, tomascohen(a)gmail.com, veron(a)veron.ch Depends on: 9915 Everybody likes a pretty graph ;) This patch adds the lightweight Charts.js javascript chart library and implements a couple of example charts on some guided reports. -- You are receiving this mail because: You are watching all bug changes.

1 25

[Bug 12820] New: SIP2 does not send rental charge fee!
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12820 Bug ID: 12820 Summary: SIP2 does not send rental charge fee! Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: SIP2 Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com Koha's SIP2 implementation has facilities to send the fee amount ( BV ) for checking out a given item, but in our code, the fee amount is never set! -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 29

[Bug 14322] New: Can't link to an item search
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14322 Bug ID: 14322 Summary: Can't link to an item search Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Searching Assignee: gmcharlt(a)gmail.com Reporter: magnus(a)libriotech.no QA Contact: testopia(a)bugs.koha-community.org The new item search in the staff client is awesome, but a bit too AJAXy for my tastes. The main problem is that it is not possible to link to the results of a search. If you do a search and you want to show the results to a colleague, you have to explain what boxes to check, what to type where, what to select from what pulldown menus etc. If the search criteria were in the URL it could be done with simply copying and pasting the URL. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3206] OAI repositry deleted record support
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '15

03 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3206 --- Comment #14 from Matthias Meusburger <matthias.meusburger(a)biblibre.com> --- (In reply to Jonathan Druart from comment #13) > Should not we update the misc/migration_tools/build_oai_sets.pl script to > take into account the deletedbiblio table? My guess is that we can't (not straightforwardly at least). OAI sets are built from rules based on MARC informations. As marcxml is not kept in the deletedbiblio table, we can't use those rules to determine which deleted records belong to a given set. However, we could decide to keep the marcxml in the deletedbiblio table, or to add a field to the deletebiblio table with the oai set id the record used to belong to before its deletion. -- You are receiving this mail because: You are watching all bug changes.

1 0