January 2023 - Koha-bugs - lists.koha-community.org

[Bug 29523] New: Add a way to prevent embedding objects that should not be allowed
by bugzilla-daemon＠bugs.koha-community.org 23 Jul '24

23 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29523 Bug ID: 29523 Summary: Add a way to prevent embedding objects that should not be allowed Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com A user can be allowed to see only patrons from its own library, for example. So fetching (through the API) all the current checkouts for a biblio and embedding the patron each checkout in the response, could violate this rule (this is the case on bug 29275). We need some mechanism to prevent this at a lower level so controller developers don't need to code for that, and also to avoid unintended leaks. Possible implementations will need to standardize things like the one used in bug 29506, which relies on the existence of ->search_limited to filter out forbidden results. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 225

[Bug 30418] New: Add permission and setting for public lists to allow staff with permission to edit contents
by bugzilla-daemon＠bugs.koha-community.org 23 Jul '24

23 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30418 Bug ID: 30418 Summary: Add permission and setting for public lists to allow staff with permission to edit contents Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Bug 26346 added an option for all staff to be able to manage contents of a public list, and a permission to allow staff to edit the configuration of public lists. It would be nice to go more granular and add a permission that allow users with this permission to edit list contents, and a setting to follow this permission for a list -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 62

[Bug 31623] New: Greater/smaller than in DB password is problematic
by bugzilla-daemon＠bugs.koha-community.org 23 Jul '24

23 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31623 Bug ID: 31623 Summary: Greater/smaller than in DB password is problematic Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: magnus(a)libriotech.no QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz To reproduce: Edit the koha-conf.xml of an existing site, by adding an element like this to the "config"-section (on the same level as the "database", "hostname" etc element): <passtest>a>b</passtest> Now read this element in the same way koha-mysql does: $ sudo xmlstarlet sel -t -v 'yazgfs/config/passtest' /etc/koha/sites/koha/koha-conf.xml a>b "a>b" is output as "a>b", which means koha-mysql will not be able to connect to the database. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 6

[Bug 29846] New: Missing documentation system preferences for Overdrive
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29846 Bug ID: 29846 Summary: Missing documentation system preferences for Overdrive Change sponsored?: --- Product: Koha Version: 21.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Documentation Assignee: koha-bugs(a)lists.koha-community.org Reporter: mik(a)adminkuhn.ch QA Contact: testopia(a)bugs.koha-community.org There are four system preferences that are not documented in the Koha manual. * OverDriveAuthName * OverDriveUsername * OverDrivePasswordRequired * OverDriveWebsiteID Some hints are given in https://bywatersolutions.com/education/overdrive-integration-in-koha -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 17856] New: Add API endpoint for item types
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17856 Bug ID: 17856 Summary: Add API endpoint for item types Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Web services Assignee: koha-bugs(a)lists.koha-community.org Reporter: josef.moravec(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 30486] New: [OMNIBUS] Synchronize database schema with (older) database revisions
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '24

19 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30486 Bug ID: 30486 Summary: [OMNIBUS] Synchronize database schema with (older) database revisions Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Database Assignee: koha-bugs(a)lists.koha-community.org Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org When you are working with a Koha database, installed many years ago and upgraded since then, you may have quite a bit of small deviations from a freshly installed database. This may be due to small inconsistencies between the changes to kohastructure and the atomic update files, among other reasons (failing dbrevs, local changes, etc) Some changes only involve for instance the order of the database columns but others may be a bit more serious: NULL or NOT NULL, type of constraint (RESTRICT or CASCADE), etc. You can have an idea of the state of your database by running the dbix script in the misc folder [in a safe way :) ] and looking at git diff. This report only collects links to individual reports where such changes are reported / resolved. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 27

[Bug 30319] New: Patron self-modification values not retained if field blocked in PatronSelfRegistrationBorrowerUnwantedField
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '24

19 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30319 Bug ID: 30319 Summary: Patron self-modification values not retained if field blocked in PatronSelfRegistrationBorrowerUnwantedField Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org When a field is hidden for self-registration, Koha is mistakenly discarding values for that field in self-modification. Somehow these two sysprefs are not being enforced distinctly. To test: 1 - turn on OPACPatronDetails 2 - confirm PatronSelfModificationBorrowerUnwantedField is blank, all fields allowed 3 - set PatronSelfRegistrationBorrowerUnwantedField to hide Title 4 - log into the opac, go to self mod (/cgi-bin/koha/opac-memberentry.pl), set a title (it is not hidden, which is correct), and save your updates 5 - go to the patron modification page in the staff interface (/cgi-bin/koha/members/members-update.pl), confirm your modification request is there but shows no changes 6 - update PatronSelfRegistrationBorrowerUnwantedField to allow title 7 - repeat step 4 8 - your new modification request shows a change to title -- You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 29392] New: Add plugin hooks before merging biblios or authorities
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '24

19 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29392 Bug ID: 29392 Summary: Add plugin hooks before merging biblios or authorities Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Plugin architecture Assignee: julian.maurice(a)biblibre.com Reporter: julian.maurice(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org For when we want to modify the final record of a merge operation -- You are receiving this mail because: You are watching all bug changes.

1 22

[Bug 31846] New: Add syspref for serials search results limit
by bugzilla-daemon＠bugs.koha-community.org 18 Jul '24

18 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31846 Bug ID: 31846 Summary: Add syspref for serials search results limit Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: glasklas(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Performing and advanced search on serials with a significant amount of subscriptions in the database can take up a lot of server resources and even (in our case) cause serious server overload. By introducing a syspref that allows setting a result limit this problem can be mitigated. Also discovered and fixed a lot of performance bottlenecks but will post this as a separate patch. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 22

[Bug 31357] New: Separate holds history from intranetreadinghistory
by bugzilla-daemon＠bugs.koha-community.org 18 Jul '24

18 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31357 Bug ID: 31357 Summary: Separate holds history from intranetreadinghistory Change sponsored?: --- Product: Koha Version: 21.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: bwsdonna(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Currently the system preference intranetreadinghistory determines visibility of both circulation history and holds history tabs in the patron record. It would be helpful to allow the option of setting each of those independently. Specifically, libraries have requested the option of being able to view the holds history in a patron record without having to enable viewing of the circulation history. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 18