July 2015 - Koha-bugs - lists.koha-community.org

[Bug 9164] New: Only allow kohaadmin login under special conditions
by bugzilla-daemon＠bugs.koha-community.org 20 Jul '15

20 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9164 Bug ID: 9164 Summary: Only allow kohaadmin login under special conditions Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: gmcharlt(a)gmail.com Reporter: m.de.rooy(a)rijksmuseum.nl Would it be an idea to separate the Koha password of kohaadmin [or whatever you name it during installation] from the database password (in terms of security)? Furthermore, is it necessary that kohaadmin can login via opac? And even, could we disable staff client login via kohaadmin under normal circumstances, only allowing login under special conditions (installer, maintenance mode, or so). We could define these conditions and provide a way for system administrators to "force these conditions" without compromising security again. Will ask for some ideas in this regard on the dev list. -- You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 14568] New: XSS in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 20 Jul '15

20 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14568 Bug ID: 14568 Summary: XSS in Staff Client Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Staff Client Assignee: koha-bugs(a)lists.koha-community.org Reporter: larit(a)student.uef.fi QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Cross site scripting vulnerabilities found in Staff Client detail.pl - param biblionumber cgi-bin/koha/catalogue/detail.pl?biblionumber=1<script type="text/javascript">alert("hello")</script> ISBDdetail.pl - param biblionumber cgi-bin/koha/catalogue/ISBDdetail.pl?biblionumber=1<script type="text/javascript">alert("hello")</script> MARCdetail.pl - param biblionumber cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=1<script type="text/javascript">alert("hello")</script> moredetail.pl - param biblionumber cgi-bin/koha/catalogue/moredetail.pl?biblionumber=1<script type="text/javascript">alert("hello")</script> request.pl - param biblionumber cgi-bin/koha/reserve/request.pl?biblionumber=1"><script type="text/javascript">alert("hello")</script> viewlog.pl - param object cgi-bin/koha/tools/viewlog.pl?do_it=1&modules=CATALOGUING&action=MODIFY&object=462688<script type="text/javascript">alert("hello")</script> -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14566] New: patronimage.pl perm issue
by bugzilla-daemon＠bugs.koha-community.org 20 Jul '15

20 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14566 Bug ID: 14566 Summary: patronimage.pl perm issue Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P3 Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: indradg(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com the patronimage.pl script allows calls to be made to it without logging in and serves up the patron photo (if it exists) Example call to script : cgi-bin/koha/members/patronimage.pl?borrowernumber=51 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 11623] New: Errors with upgrade from 3.00.00.070 to 3.14.02.000
by bugzilla-daemon＠bugs.koha-community.org 20 Jul '15

20 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11623 Bug ID: 11623 Summary: Errors with upgrade from 3.00.00.070 to 3.14.02.000 Change sponsored?: --- Product: Koha Version: 3.14 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Installation and upgrade (web-based installer) Assignee: koha-bugs(a)lists.koha-community.org Reporter: dswhite42(a)yahoo.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com There are a number of database upgrade errors that take place when upgrading from 3.00.00.070 to 3.14.02.000 * A number of upgrades expect the tables to have foreign keys and be in InnoDB format. In 3.00.00.070, MyISAM (and no foreign keys) is the standard. With no testing to see if the keys exist, these commands fail with (errno: 152) Problem examples: ALTER TABLE issues DROP FOREIGN KEY `issues_ibfk_1` ALTER TABLE issues DROP FOREIGN KEY `issues_ibfk_2` ALTER TABLE `message_transports` DROP FOREIGN KEY `message_transports_ibfk_3` ALTER TABLE patronimage DROP FOREIGN KEY patronimage_fk1 * In updatedatabase.pl, in the section for DBVersion 3.00.00.091, there are references to the @sql_scripts "installer/data/mysql/en/optional/sample_notices_message_attributes.sql" and "installer/data/mysql/en/optional/sample_notices_message_transports.sql" . These should be "installer/data/mysql/en/mandatory/sample_notices_message_attributes.sql" and "installer/data/mysql/en/mandatory/sample_notices_message_transports.sql" * Even when that's corrected, the sample_notices_message_transports.sql script fails because it references foreign keys to the "letters" table that have not been created yet. The reserves/HOLD combo isn't created until the 3.01.00.05 section of the updatedatabase.pl script, and circulation/CHECKIN and circulation/CHECKOUT are not created until the 3.01.00.013 section. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 4

[Bug 9422] New: Patron picture uploader ignores patronimages syspref
by bugzilla-daemon＠bugs.koha-community.org 20 Jul '15

20 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9422 Bug ID: 9422 Summary: Patron picture uploader ignores patronimages syspref Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: gmcharlt(a)gmail.com Reporter: jcamins(a)cpbibliography.com Although the patronimages syspref says it sets whether or not patron images can be uploaded, in fact all it does is toggle display. The uploader should probably not be available when the feature is disabled, to prevent librarians from getting frustrated when it seems not to work. -- You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 2422] Cataloging searches with more than 1 page results show blank pages after page 1
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '15

19 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2422 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |katrin.fischer(a)bsz-bw.de Version|rel_3_0 |3.20 --- Comment #8 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- I also tested this on master - works ok for me. All pages in cataloguing search seem to display results as expected. Jonathan, could this be a problem with one of the filters again? -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13291] New: Suppress OPACFallback syspref - its use and itself
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '15

19 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13291 Bug ID: 13291 Summary: Suppress OPACFallback syspref - its use and itself Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: gmcharlt(a)gmail.com Reporter: frederic(a)tamil.fr QA Contact: testopia(a)bugs.koha-community.org Since 'prog' theme doesn't exist anymore, OPACFallback syspref is without object anymore. -- You are receiving this mail because: You are watching all bug changes.

1 23

[Bug 14447] New: Show the vol./ no. on the child record based from the host entry
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '15

19 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14447 Bug ID: 14447 Summary: Show the vol./ no. on the child record based from the host entry Change sponsored?: --- Product: Koha Version: 3.16 Hardware: PC OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: gmcharlt(a)gmail.com Reporter: jadolfo(a)pssc.org.ph QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Created attachment 40547 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=40547&action=edit no indication of journal's vol. no. KOha 3.16.4 OS Debian I need the child record (article) to show the (host record) journal's vol. no. it is from. I created the child record using analytics from the host record. I discovered upon searching for the child record, I was not able to see the journal's vol. no., I can only see the journal title. Thank you. -- You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 9750] New: bring routing lists in to notices & slips
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '15

19 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9750 Bug ID: 9750 Summary: bring routing lists in to notices & slips Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: gmcharlt(a)gmail.com Reporter: nengard(a)gmail.com Routing Lists should be managed in Notices & Slips so that people can customize them with notes or news or whatever they want. -- You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 14559] New: Add fields to routing list
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '15

19 Jul '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14559 Bug ID: 14559 Summary: Add fields to routing list Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: nengard(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com Allow people to choose other patron fields to include on routing lists. Often organizations store department or office information on the patron record that would be helpful on the routing list but there is no way to customize it to show these fields. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1