July 2020 - Koha-bugs - lists.koha-community.org

[Bug 12556] SelfCheck machine starts the hold instantly with an email sent out
by bugzilla-daemon＠bugs.koha-community.org 27 Jul '20

27 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12556 Joonas Kylmälä <joonas.kylmala(a)helsinki.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |joonas.kylmala(a)helsinki.fi Status|NEW |Needs Signoff -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 12617] Koha should let admins to configure automatically generated password complexity/difficulty
by bugzilla-daemon＠bugs.koha-community.org 27 Jul '20

27 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12617 Emmi Takkinen <emmi.takkinen(a)outlook.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12617] Koha should let admins to configure automatically generated password complexity/difficulty
by bugzilla-daemon＠bugs.koha-community.org 27 Jul '20

27 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12617 --- Comment #7 from Emmi Takkinen <emmi.takkinen(a)outlook.com> --- Created attachment 107384 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=107384&action=e… Bug 12617: Add syspref PasswordLengthsForCategories Sometimes different patron categories using same password policy would require different lengths in their passwords. In these cases having one length per policy isn't always ideal. This patch adds new syspref 'PasswordLengthsForCategories' to define password lengths for different patron categories in YAML format and removes use of 'minAlnumPasswordLength' and 'minComplexPasswordLength'. If category has no rule set syspref 'minPasswordLength' is used. To test: 1. Run updatedatabase.pl 2. Define some rules to 'PasswordLengthsForCategories' (e.g example provided) 3. Try setting and changing password in different pages (basically follow test plans from previous patches). 4. Confirm error messages are displayed correctly. Also prove t/AuthUtils.t. Sponsored-by: Koha-Suomi Oy -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12617] Koha should let admins to configure automatically generated password complexity/difficulty
by bugzilla-daemon＠bugs.koha-community.org 27 Jul '20

27 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12617 --- Comment #6 from Emmi Takkinen <emmi.takkinen(a)outlook.com> --- Created attachment 107383 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=107383&action=e… Bug 12617: Add new regex patterns to password_check.inc This patch adds new regex patterns to follow into password_check.inc files. To test: 1. Create or find existing patron. 2. Set or edit invalid password for patron in OPAC and staff interfaces: a) create and edit patron pages b) 'Change password' pages 3. Confirm alert text next to input field is displayed and it follows set passwordpolicy. Sponsored-by: Koha-Suomi Oy -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12617] Koha should let admins to configure automatically generated password complexity/difficulty
by bugzilla-daemon＠bugs.koha-community.org 27 Jul '20

27 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12617 Emmi Takkinen <emmi.takkinen(a)outlook.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #37740|0 |1 is obsolete| | --- Comment #5 from Emmi Takkinen <emmi.takkinen(a)outlook.com> --- Created attachment 107382 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=107382&action=e… Bug 12617: Koha should let admins to configure automatically generated password complexity/difficulty Adds simple password policy(with regards to complexity) management into categories: - Per category password policy: admins can configure what kind of passwords get generated in member-passwords. User-created passwords are also checked against the policy if it is defined and complexity is enforced for every user based on their set category. - Predefined policies: - simplenumeric: the digits 0-9 allowed only - alphanumeric: passwords must contain only the digits 0-9 and lowercase and uppercase characters. Special characters are not allowed. - complex: patrons are required to use complex passwords containing numbers, uppercase and lowercase characters and special characters. Old passwords for excisting patrons are not affected. To test: 1. Apply this patch and update database. 2. Navigate to categories.pl and note there is new column 'Password policies' has been added. 3. Edit some categories and set password policy for them. 4. Set some values to sysprefs 'minPasswordLength', 'minAlnumPasswordLength' and 'minComplexPasswordLength'. Staff interface: 1. Create new patron. 2. Set their password against their categorys policy and save. 3. Error message is displayed (with content depending on password policy). 4. Set acceptable password and save succesfully. 5. Repeat steps 2-3-4 on patron edit page. 6. Repeat steps 2-3-4 on 'Change password' page. OPAC: 1. Enable 'OpacPasswordChange' and 'OpacResetPassword'. 2. On OPAC, repeat what you did on staff interface (on create, edit and 'Change your password'. 3. Confirm errors are displayed correctly and saving works. 4. Log out and go to 'Forgotten password recovery' page. 5. Send and receive email for password recovery. 6. Set unacceptable password and save, confirm correct error is displayed. 7. Set acceptable password and save succesfully. REST API: 1. With your preferred REST client (curl e.g) sent POST request to /api/v1/patrons/{patron_id}/password with 'password' and 'password_2' parameters. 2. Confirm correct error message is displayed when sending password against password policy. 3. Confirm password is changed when acceptable password is send. Also prove t/AuthUtils.t and t/db_dependent/api/v1/patrons_password.t Sponsored-by: Koha-Suomi Oy --- NOTE: Unlike in original patch, no App::GenPass is used due it's complex dependencies. I've instead added new patterns to follow in sub generate_password and member-password.tt when generating password successions. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26068] New: OPAC "Refine Your Search" did't work
by bugzilla-daemon＠bugs.koha-community.org 27 Jul '20

27 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26068 Bug ID: 26068 Summary: OPAC "Refine Your Search" did't work Change sponsored?: --- Product: Koha Version: 20.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: ctw2100(a)protonmail.com QA Contact: testopia(a)bugs.koha-community.org My Koha Version: 20.05.01.000 "Refine Your Search" doesn't include all results, only facets on the page that you're viewing. This Bugs same as _BUG_ 1312 https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=1312 Error Log: [Mon Jul 27 13:31:24.776946 2020] [cgi:error] [pid 65585] [client 127.0.0.1:9223] AH01215: [Mon Jul 27 13:31:24 2020] opac-search.pl: Use of uninitialized value in hash element at /usr/share/koha/lib/C4/Search.pm line 1956.: /usr/share/koha/opac/cgi-bin/opac/opac-search.pl, referer: http://127.0.0.1:8081/cgi-bin/koha/opac-search.pl?idx=kw&q=1&sort_by=releva… [Mon Jul 27 13:31:24.806693 2020] [cgi:error] [pid 65585] [client 127.0.0.1:9223] AH01215: [Mon Jul 27 13:31:24 2020] opac-search.pl: Use of uninitialized value in hash element at /usr/share/koha/lib/C4/Search.pm line 1956.: /usr/share/koha/opac/cgi-bin/opac/opac-search.pl, referer: http://127.0.0.1:8081/cgi-bin/koha/opac-search.pl?idx=kw&q=1&sort_by=releva… [Mon Jul 27 13:31:24.834891 2020] [cgi:error] [pid 65585] [client 127.0.0.1:9223] AH01215: [Mon Jul 27 13:31:24 2020] opac-search.pl: Use of uninitialized value in hash element at /usr/share/koha/lib/C4/Search.pm line 1956.: /usr/share/koha/opac/cgi-bin/opac/opac-search.pl, referer: http://127.0.0.1:8081/cgi-bin/koha/opac-search.pl?idx=kw&q=1&sort_by=releva… -- You are receiving this mail because: You are watching all bug changes.

1 2

[Bug 1312] "Refine Your Search" doesn't include all results, only facets on page
by bugzilla-daemon＠bugs.koha-community.org 27 Jul '20

27 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=1312 Charlie <ctw2100(a)protonmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ctw2100(a)protonmail.com -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 25875] New: Patron displayed multiple times in add user seaerch if they have multiple subpermissions
by bugzilla-daemon＠bugs.koha-community.org 26 Jul '20

26 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25875 Bug ID: 25875 Summary: Patron displayed multiple times in add user seaerch if they have multiple subpermissions Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org To recreate: 1 - Give a patron full acquisitions permissions 2 - Also give them several subpermissions on other areas 3 - Go to Acquisitions 4 - Edit a fund 5 - Add a user to the fund 6 - Search for user above 7 - They return multiple times in results -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 20

[Bug 14862] Upgrade jQuery from 1.7 to 3.4.1 in OPAC
by bugzilla-daemon＠bugs.koha-community.org 26 Jul '20

26 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14862 Victor Grousset/tuxayo <victor(a)tuxayo.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |25793 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25793 [Bug 25793] OAI 'Set' and 'Metadata' dropdowns broken by OPAC jQuery upgrade -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 25805] New: SIP will show hold patron name (DA) as C4::SIP::SIPServer=HASH(0x88175c8) if there is no patron
by bugzilla-daemon＠bugs.koha-community.org 26 Jul '20

26 Jul '20

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25805 Bug ID: 25805 Summary: SIP will show hold patron name (DA) as C4::SIP::SIPServer=HASH(0x88175c8) if there is no patron Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: SIP2 Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com This bug is basically the same as bug 24966, but for hold_patron_name instead of hold_patron_bcode. The subroutine hold_patron_bcode should always return an empty string, not undef. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 21