March 2021 - Koha-bugs - lists.koha-community.org

[Bug 18315] New: authentication and authorization refactoring
by bugzilla-daemon＠bugs.koha-community.org 07 May '25

07 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18315 Bug ID: 18315 Summary: authentication and authorization refactoring Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: gmcharlt(a)gmail.com Reporter: oha(a)oha.it QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org Currently, C4::Auth is responsible to do session management, authentication and authorization. There is no clear separations between them, and the authentication is not modular, making it increasingly harder to maintain and/or introduce no authentication integrations. I was experimenting on this for a while, and I managed to put together few commits in a branch. It started as a proposal, but turned out to be working in _most_ of my tests. here more details: I completely removed any need for CGI and CGI::Session while maintaining a fork-exec aproach to the scripts. (This made it easier to implement Koha::Middleware::Session, Koha::Session::DB and ::KohaCache) Koha::Middleware::Session inject a session object in the Plack request, and invoke Koha::Auth if any authentication tokens are available. Koha::Auth has a list of modules which will be invoked in turn and could be enabled/disabled plack.psgi is changed as well, it has enabled the new Middleware and the applications used are no longer Plack::App::CGIBin but Koha::Middleware::App. here few of the things i want to do to simplify the interaction with the current "legacy" code: I didn't change the scripts or any other module at all, instead I tried to hijack C4::Auth methods to rely on Koha::Session and Koha::Auth. This make it simple to switch back to the previous plack.psgi OR using apache and the normal cgi-bin. authentication should happen upfront, before the script is even started. script will have to verify authorization. authentication MUST be modular, possibly having different systems cooperate. (Some serious discussions must be around this point, especially about accounting and authority) what needs to be done: permissions should be reintroduced. right now permissions are read for the user and set in the template, but no checks are perform on requests. (should be fairly simple to do) reintroduce the code related to shib, cas and any other. more testing, especially for the installer (there is lots of code regarding the web installer which isn't there anymore) -- You are receiving this mail because: You are watching all bug changes.

1 17

[Bug 18298] New: Enforce password complexity
by bugzilla-daemon＠bugs.koha-community.org 05 May '25

05 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18298 Bug ID: 18298 Summary: Enforce password complexity Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Patrons Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Some libraries would want to add the option to Koha to enforce a strong password policy. That policy would mean that passwords should include both upper and lower case characters one or more numbers. -- You are receiving this mail because: You are watching all bug changes.

1 91

[Bug 17406] New: Simplify pay.pl interface - pt.1
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17406 Bug ID: 17406 Summary: Simplify pay.pl interface - pt.1 Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com I think we can simplify the payment screen. 1) Remove the Pay Amount button. By default, all items are selected, so the Pay selected will do the job. 2) Remove the cancel link. A) It's a link, not a button. B) All it does is change tabs. There isn't anything to really cancel. Changing tabs or navigating elsewhere does the same thing. 3) Remove Write off all button and replace with Write off selected button. 4) Remove the individual Pay and Write off buttons. They are redundant. #4 is my opinion, but they really convolute the flow. The checkboxes and two buttons are sufficient and straight forward. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 18

[Bug 18292] New: t/db_dependent/Circulation.t Dubious, test returned 1 even if test ok
by bugzilla-daemon＠bugs.koha-community.org 01 May '25

01 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18292 Bug ID: 18292 Summary: t/db_dependent/Circulation.t Dubious, test returned 1 even if test ok Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: olli-antti.kivilahti(a)jns.fi QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 40

[Bug 27510] New: Download the report in HTML format
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '25

25 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27510 Bug ID: 27510 Summary: Download the report in HTML format Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Reports Assignee: koha-bugs(a)lists.koha-community.org Reporter: ivan.dziuba(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 37

[Bug 19691] New: Enforce OPAC SEARCH LIMIT server-side
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '25

25 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19691 Bug ID: 19691 Summary: Enforce OPAC SEARCH LIMIT server-side Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Searching Assignee: david.bourgault(a)inlibro.com Reporter: david.bourgault(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org Current behavior of the OPAC_SEARCH_LIMIT variable (set in httpd.conf) is to add a hidden HTML input in masthead.inc. This works, but makes it easy to override the limit by altering the URL. -- You are receiving this mail because: You are watching all bug changes.

1 6

[Bug 19376] New: Add 655$a (Genre/Form) to zebra search facets
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '25

25 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19376 Bug ID: 19376 Summary: Add 655$a (Genre/Form) to zebra search facets Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching - Zebra Assignee: david.bourgault(a)inlibro.com Reporter: david.bourgault(a)inlibro.com This is a functionality we have with some clients, that we would like to push to the Koha community. It has no impact on libraries that ignore the 655$a tag, but enhances search filtering for those who do. -- You are receiving this mail because: You are watching all bug changes.

1 31

[Bug 19368] New: Add syspref to ignore words when sorting serials
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '25

25 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19368 Bug ID: 19368 Summary: Add syspref to ignore words when sorting serials Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Serials Assignee: david.bourgault(a)inlibro.com Reporter: david.bourgault(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com, philippe.blouin(a)inlibro.com This is a functionality we offer some of our clients that we would like to push to the community. It adds a system preference containing a list of words, which are ignored when sorting the serial search results table. -- You are receiving this mail because: You are watching all bug changes.

1 121

[Bug 19325] New: Enable padding of printed barcodes
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '25

25 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19325 Bug ID: 19325 Summary: Enable padding of printed barcodes Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Label/patron card printing Assignee: cnighswonger(a)foundations.edu Reporter: david.bourgault(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org Small enhancement which would provide an option to pad the length of barcodes printed to PDF with a custom character. -- You are receiving this mail because: You are watching all bug changes.

1 23

[Bug 27490] New: Rename system preference language to StaffInterfaceLanguage
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '25

25 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27490 Bug ID: 27490 Summary: Rename system preference language to StaffInterfaceLanguage Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: aleisha(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org find all of the places in the code that refer to the 'language' system preference and rename them to 'StaffInterfaceLanguage' write an atomic update to rename the language system preference to StaffInterfaceLanguage in the preferences table in the database rename the language syspref in sysprefs.sql refer to bug 10328 for an example -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 34