December 2020 - Koha-bugs - lists.koha-community.org

[Bug 25934] New: RequireStrongPassword should be more complex (password policy complexity)
by bugzilla-daemon＠bugs.koha-community.org 05 Sep '25

05 Sep '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25934 Bug ID: 25934 Summary: RequireStrongPassword should be more complex (password policy complexity) Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org At the moment, RequireStrongPassword uses a minimum password length (of only 3 characters or the sysperf minPasswordLength) and a static regular expression. Here are a number of improvements: 1. A minimum length of 10 characters that can't be lowered via minPasswordLength 2. Should contain 3 of the following 4 sets (lowercase, uppercase, numbers, special characters) 3. Not be the same as a previously set password 4. Should not include dictionary words or common passwords (This could be challenging to do comprehensively on low spec systems, although one variation of this could be to add a customizable list of passwords to exclude.) 5. Should not be equal to the username -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 16

[Bug 19909] New: Show attributes in patron search results
by bugzilla-daemon＠bugs.koha-community.org 04 Sep '25

04 Sep '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19909 Bug ID: 19909 Summary: Show attributes in patron search results Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Patrons Assignee: julian.maurice(a)biblibre.com Reporter: julian.maurice(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com This will add a new column (hidden by default) in the results table to displays all attributes associated to the corresponding patron. -- You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 23652] New: Let patrons opt out of search history
by bugzilla-daemon＠bugs.koha-community.org 03 Sep '25

03 Sep '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23652 Bug ID: 23652 Summary: Let patrons opt out of search history Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org There is no mechanism for patrons to opt out of search history on the OPAC. This should be something added to opac-privacy.pl. -- You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 20476] New: Two factor authentication for the staff client - omnibus
by bugzilla-daemon＠bugs.koha-community.org 02 Sep '25

02 Sep '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20476 Bug ID: 20476 Summary: Two factor authentication for the staff client - omnibus Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff Client Assignee: koha-bugs(a)lists.koha-community.org Reporter: magnus(a)libriotech.no QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 40

[Bug 18675] New: Translatability: Get rid of [ %% in translation for csv-profiles.tt
by bugzilla-daemon＠bugs.koha-community.org 01 Sep '25

01 Sep '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18675 Bug ID: 18675 Summary: Translatability: Get rid of [%% in translation for csv-profiles.tt Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: trivial Priority: P5 - low Component: I18N/L10N Assignee: koha-bugs(a)lists.koha-community.org Reporter: veron(a)veron.ch QA Contact: testopia(a)bugs.koha-community.org CC: frederic(a)tamil.fr Translation tool for file csv-profiles.tt picks following line: %s [%% IF csv_profile.encoding == encoding OR NOT csv_profile AND encoding == 'utf8' %%] This is due to a line break inside a template directive. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 16

[Bug 26383] New: Koha::Patron->is_superlibrarian is not optimal
by bugzilla-daemon＠bugs.koha-community.org 01 Sep '25

01 Sep '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26383 Bug ID: 26383 Summary: Koha::Patron->is_superlibrarian is not optimal Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 23634 It must not call $self->has_permission which does a DB request. C4::Context::IsSuperLibrarian is what must be done: $self->flags % 2 It could be good to replace the occurrence of IsSuperLibrarian at the same time, it's a bad pattern to have twice the same method to check for this superpower. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23634 [Bug 23634] Privilege escalation vulnerability for staff users with 'edit_borrowers' permission and 'OpacResetPassword' enabled -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 12

[Bug 18711] New: No longer possible have a blank value for Classification Sources in the Administration Module
by bugzilla-daemon＠bugs.koha-community.org 01 Sep '25

01 Sep '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18711 Bug ID: 18711 Summary: No longer possible have a blank value for Classification Sources in the Administration Module Change sponsored?: --- Product: Koha Version: 16.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: karen(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com In Koha 3.22 it was possible to enter a blank value for Classification Sources in the Administration Module. In 16.11 it is no longer possible to enter a blank value. The expected behavior is that it would still be possible to enter a blank value. The SWITCH Library Consortium has requested the ability to keep the ability to add a blank value field. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 7

[Bug 25938] New: Identify the renewal type in the renewal after_circ_action hook
by bugzilla-daemon＠bugs.koha-community.org 28 Aug '25

28 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25938 Bug ID: 25938 Summary: Identify the renewal type in the renewal after_circ_action hook Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Plugin architecture Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org It would be nice to be able to distinguish between autorenewal, opac, staff and SIP renewals in the after_circ_action renewal hook. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2

[Bug 17983] New: Add minutes loan to DiscreteCalendar
by bugzilla-daemon＠bugs.koha-community.org 28 Aug '25

28 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17983 Bug ID: 17983 Summary: Add minutes loan to DiscreteCalendar Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Holidays Assignee: koha-bugs(a)lists.koha-community.org Reporter: mehdi.hamidi(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org Hello everyone, This is an additional feature to our new Discrete Calendar. Theses patches add the possibility to choose the loan unit as minutes in circulations rules. Test plan: - Apply patch of Bugzilla 17015 - Apply this patch. - Run test t/db_dependent/minutes_loan.t - Create new item type for the new rule. - Create circulation rule and fill the fields, make sure the unit is set to : minutes, choose the item type of the one created above.- - Checkout an item that follow the circulation rule and set due date in the past. - Run fines.pl. - Check if the correct amount was calculated. - Note: make sure to factor in the fine grace period if set and the system preference FinesIncludeGracePeriod. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 49

[Bug 24226] New: Advanced editor - drops subfields/punctuation when manually linking authority records
by bugzilla-daemon＠bugs.koha-community.org 27 Aug '25

27 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24226 Bug ID: 24226 Summary: Advanced editor - drops subfields/punctuation when manually linking authority records Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: mkstephens(a)lancasterseminary.edu QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl In the basic editor, it is possible to manually search for an authority record and link to it while preserving the original punctuation in the bibliographic record. It is also possible to search for and link to a broader heading and the additional subfields will remain intact in the bibliographic record. If you try to do either one of these things in the advanced editor using ctrl+shift+L to get to the authority search, once you link to the authority record that you select the MARC field you are editing will be rewritten to match the corresponding field in the authority record. It would be very nice if the advanced cataloging editor would simply append the authid in $9 and leave the rest of the MARC field alone. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4