April 2024 - Koha-bugs - lists.koha-community.org

[Bug 36691] New: Serial Alert notice does not appear in patron notices tab
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '24

25 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36691 Bug ID: 36691 Summary: Serial Alert notice does not appear in patron notices tab Change sponsored?: --- Product: Koha Version: 23.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: esther.melander(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org To recreate: 1. Edit a serial subscription so that patron notification is set to New serial issue. 2. Log in to the OPAC as a regular patron, search for the serial, and subscribe to email notification on new issues. 3. Ensure there is text in the Serials_Alert email notice. 4. Ensure the patron account has an email address and process_message_queue.pl is running. 5. Return to the serial and receive a new issue. The patron should receive an email notice that a new issue is available. Check the notices tab on the patron account and see the Serials Alert notice does not appear. Possibly a duplicate of Bug 12170. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2

[Bug 36695] New: anonymous patron is not blocked from checkout via SIP
by bugzilla-daemon＠bugs.koha-community.org 25 Apr '24

25 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36695 Bug ID: 36695 Summary: anonymous patron is not blocked from checkout via SIP Change sponsored?: --- Product: Koha Version: 23.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: SIP2 Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org The anonymous patron is not allowed to checkout through the staff module, but it appears that you can checkout as this user via SIP2, particularly through 3rd party self check systems that do not require the patron to enter a password. While it is more likely this could be exploited with a random library card number, this does create a hole in blocking circ on this account. 1. Make sure AnonymousPatron is pointed to an account. 2. Point your 3rd party self check at Koha, and do not require a password for patron authentication. (You COULD also test with a username/password scenario, which also shouldn't be allowed). 3. Verify that if you go to the anonymous patron account in the staff interface, you cannot checkout items. 4. Sign into the 3rd party self check with the anonymous account, either as a sign in with cardnumber only, or with the username/password scenario. 5. Proceed to check out items! Our system is setup for cardnumber only, but I imagine it works just the same with username/password. But I can confirm that this account is checking out via SIP2. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 36690] New: Force security on self check
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36690 Bug ID: 36690 Summary: Force security on self check Change sponsored?: --- Product: Koha Version: 23.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Self checkout Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org I would suggest that if SelfCheckoutByLogin is set to cardnumber, that SelfCheckAllowByIPRanges be enforced, and if the selfcheck is accessed at an IP not listed in SelfCheckAllowByIPRanges, that SelfCheckoutByLogin ignore the setting and act as if it is set to username/password. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 36688] New: Rest API access on public side to IP field needed
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36688 Bug ID: 36688 Summary: Rest API access on public side to IP field needed Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org CC: tomascohen(a)gmail.com It would be extremely helpful if Rest API would allow us to look up the IP field for a specified branch. This would allow us to to branch specific customizations when not logged in and perhaps at some point, self-check logins. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 26344] New: Move translatable strings out of templates into patrons.js
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26344 Bug ID: 26344 Summary: Move translatable strings out of templates into patrons.js Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org CC: testopia(a)bugs.koha-community.org Depends on: 21156 Strings defined in templates for use in autocomplete/patrons.js can now be wrapped in the new translation function. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21156 [Bug 21156] Internationalization: plural forms, context, and more for JS files -- You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 27354] New: Translate JavaScript in intranet-tmpl/js
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27354 Bug ID: 27354 Summary: Translate JavaScript in intranet-tmpl/js Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: I18N/L10N Assignee: koha-bugs(a)lists.koha-community.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org CC: frederic(a)tamil.fr Blocks: 26344 Currently JavaScript files in intranet-tmpl/js are not processed for translation. This makes it impossible to leverage the new I18N tools created by 21156. I don't think there's any reason why this directory should be excluded. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26344 [Bug 26344] Move translatable strings out of templates into patrons.js -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 36686] New: Problems with manual transfers
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36686 Bug ID: 36686 Summary: Problems with manual transfers Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com In testing my patch for Bug 25682 I'm finding several problems with item transfers. In short, the handling of items with holds is completely broken: - Logged in to Branch A. - Find a barcode for a title which has a biblio-level hold (not already in transit) to be sent to Branch B. - Submit transfer to Branch C. - Three actions are offered: 1. Transfer to Branch B 2. Cancel hold and then attempt transfer 3. Ignore and return to transfers Testing each of the three actions: 1. The page says "Item is now in transit to Branch C (not the hold's destination)" 2. The item is not in transit, and the hold has been changed to an item-level hold. 3. Works correctly. No change to the hold and no transfer initiated. - Logged in to Branch A. - Find a barcode for a title which has a biblio-level hold (not already in transit) to be sent to Branch B. - Check in the item, confirm hold and transfer. - Submit transfer to Branch C. - Two actions are offered: 1. Cancel hold and then attempt transfer 2. Ignore and return to transfers Testing each of the two actions: 1. The page says "Reserve cancelled" (sic). The original transfer to Branch B is still in place. 2. Works correctly. No change to the hold and the original transfer remains. - Logged in to Branch D. - Find a barcode for a title which has a biblio-level hold (not already in transit) to be held at Branch D. - Check in the item, confirm hold. - Log in to Branch A. - Submit a transfer with that barcode to Branch C. - Two actions are offered: 1. Cancel hold and then attempt transfer 2. Ignore and return to transfer. Testing each of the two actions: 1. The page says "Reserve cancelled" (sic). The hold has been cancelled but the item has not been transferred. 2. Works correctly. Hold remains unchanged, no transfer initiated. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 36685] New: Add ability to set display order of custom search filters
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36685 Bug ID: 36685 Summary: Add ability to set display order of custom search filters Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Searching Assignee: koha-bugs(a)lists.koha-community.org Reporter: lucas(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org If you make a custom search filter ( SavedSearchFilters ) they are currently order alphabetically. Some libraries would like the ability to set the display order differently. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 Pedro Amorim <pedro.amorim(a)ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36683 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5463] Limit to available shows on hold items
by bugzilla-daemon＠bugs.koha-community.org 24 Apr '24

24 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5463 Brendan Lawlor <blawlor(a)clamsnet.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |blawlor(a)clamsnet.org -- You are receiving this mail because: You are watching all bug changes.

1 0