November 2017 - Koha-bugs - lists.koha-community.org

[Bug 19071] New: Fix Circulation/issue.t
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19071 Bug ID: 19071 Summary: Fix Circulation/issue.t Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org Resolve: DBD::mysql::db do failed: Cannot delete or update a parent row: a foreign key constraint fails (`koha_master`.`clubs`, CONSTRAINT `clubs_ibfk_2` FOREIGN KEY (`branchcode`) REFERENCES `branches` (`branchcode`)) [for Statement "DELETE FROM branches"] at t/db_dependent/Circulation/issue.t line 65. Cause: See also bug 19070. We do not need to delete all branches here. -- You are receiving this mail because: You are watching all bug changes.

1 18

[Bug 3185] Mobile Library/Bookmobile Mode
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3185 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|REOPENED |RESOLVED -- You are receiving this mail because: You are watching all bug changes. You are the QA Contact for the bug.

1 0

[Bug 19128] XSS - patron-attr-types.tt, authorised_values.tt and categories.tt
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19128 Mason James <mtj(a)kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mtj(a)kohaaloha.com --- Comment #8 from Mason James <mtj(a)kohaaloha.com> --- Pushed to 16.05.x, for 16.05.17 release -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19127] Stored XSS in csv-profiles.pl
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19127 Mason James <mtj(a)kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mtj(a)kohaaloha.com --- Comment #8 from Mason James <mtj(a)kohaaloha.com> --- Pushed to 16.05.x, for 16.05.17 release -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19125] XSS - members.pl
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19125 Mason James <mtj(a)kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mtj(a)kohaaloha.com --- Comment #9 from Mason James <mtj(a)kohaaloha.com> --- Pushed to 16.05.x, for 16.05.17 release -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19108] Stored XSS in multiple scripts
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19108 Mason James <mtj(a)kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mtj(a)kohaaloha.com --- Comment #27 from Mason James <mtj(a)kohaaloha.com> --- Pushed to 16.05.x, for 16.05.17 release -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19103] Stored XSS in itemtypes.pl - patron-attr-types.pl - matching-rules.pl
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19103 Mason James <mtj(a)kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mtj(a)kohaaloha.com --- Comment #14 from Mason James <mtj(a)kohaaloha.com> --- Pushed to 16.05.x, for 16.05.17 release -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19086] Multiple cross-site scripting vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19086 --- Comment #44 from Mason James <mtj(a)kohaaloha.com> --- Pushed to 16.05.x, for 16.05.17 release -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 18654] New: Translatability: Get rid of tt directives starting with [ %% in translation for itemsearch.tt
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18654 Bug ID: 18654 Summary: Translatability: Get rid of tt directives starting with [%% in translation for itemsearch.tt Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: I18N/L10N Assignee: koha-bugs(a)lists.koha-community.org Reporter: veron(a)veron.ch QA Contact: testopia(a)bugs.koha-community.org CC: frederic(a)tamil.fr Translation for file itemsearch.tt exposes tt directifes like: %s %s %s %s %s %s %s %s %s [%% params = { f => f.$i q = q.$i op = op.$i } %%] %s %s %s %s %s %s %s %s %s %s %s or [%% INCLUDE form_field_select name="homebranch" options = branches empty_option = "All libraries" %%] [%% INCLUDE form_field_select name="holdingbranch" options = branches empty_option = "All libraries" %%] %s [%% INCLUDE form_field_select name="location" options = locations empty_option = "All locations" %%] %s -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 31

[Bug 18906] New: Superlibrarian and budget_manage_all users should always see all funds
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '17

23 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18906 Bug ID: 18906 Summary: Superlibrarian and budget_manage_all users should always see all funds Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org If you have the superlibrarian or budget_manage_all permission you should be able to see all funds at all times - otherwise it's not possible to centrally manage and edit funds in a multi-branch system. Also, if someone logged themselves out from a fund by wrong configuration, users with those permissions need to be able to fix it. To test: - Make sure your user has superlibrarian permission - Go into acquisisitions - Create a new budget - Create a new fund - set library to 'not your home library' - set restricted to 'owner, users and library' - Verify that after saving the fund, you can no longer access it. - Change your home branch - log out and log in again - Verify you can now see the fund Repeat with all acq permissions including budget_manage_all - you will also experience that you are logged out from accessing the fund you created. Note: visibility on the acq start page will work correctly in these scenarios. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 12