May 2024 - Koha-bugs - lists.koha-community.org

[Bug 29523] New: Add a way to prevent embedding objects that should not be allowed
by bugzilla-daemon＠bugs.koha-community.org 23 Jul '24

23 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29523 Bug ID: 29523 Summary: Add a way to prevent embedding objects that should not be allowed Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com A user can be allowed to see only patrons from its own library, for example. So fetching (through the API) all the current checkouts for a biblio and embedding the patron each checkout in the response, could violate this rule (this is the case on bug 29275). We need some mechanism to prevent this at a lower level so controller developers don't need to code for that, and also to avoid unintended leaks. Possible implementations will need to standardize things like the one used in bug 29506, which relies on the existence of ->search_limited to filter out forbidden results. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 225

[Bug 30418] New: Add permission and setting for public lists to allow staff with permission to edit contents
by bugzilla-daemon＠bugs.koha-community.org 23 Jul '24

23 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30418 Bug ID: 30418 Summary: Add permission and setting for public lists to allow staff with permission to edit contents Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Bug 26346 added an option for all staff to be able to manage contents of a public list, and a permission to allow staff to edit the configuration of public lists. It would be nice to go more granular and add a permission that allow users with this permission to edit list contents, and a setting to follow this permission for a list -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 62

[Bug 36911] New: Reindent circ-menu.inc
by bugzilla-daemon＠bugs.koha-community.org 23 Jul '24

23 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36911 Bug ID: 36911 Summary: Reindent circ-menu.inc Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org I would like to reformat circ-menu.inc so that it has consistent spacing and indentation. -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 31623] New: Greater/smaller than in DB password is problematic
by bugzilla-daemon＠bugs.koha-community.org 23 Jul '24

23 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31623 Bug ID: 31623 Summary: Greater/smaller than in DB password is problematic Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: magnus(a)libriotech.no QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz To reproduce: Edit the koha-conf.xml of an existing site, by adding an element like this to the "config"-section (on the same level as the "database", "hostname" etc element): <passtest>a>b</passtest> Now read this element in the same way koha-mysql does: $ sudo xmlstarlet sel -t -v 'yazgfs/config/passtest' /etc/koha/sites/koha/koha-conf.xml a>b "a>b" is output as "a>b", which means koha-mysql will not be able to connect to the database. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 6

[Bug 35558] New: Do not fetch local image if none exists
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35558 Bug ID: 35558 Summary: Do not fetch local image if none exists Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Templates Assignee: jonathan.druart+koha(a)gmail.com Reporter: jonathan.druart+koha(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 35557 On the search results we are fetching the thumbnails of the local cover images using catalogue/image.pl Which means 1 GET per results on the page. Should not we have this info beforehand in order to reduce the number of hits and network traffic? Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35557 [Bug 35557] LoadResultsCovers is not used (staff) -- You are receiving this mail because: You are watching all bug changes.

1 30

[Bug 33887] New: Automatic checkin should be able to optionally fill the next hold with the returned item
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33887 Bug ID: 33887 Summary: Automatic checkin should be able to optionally fill the next hold with the returned item Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com When an item is automatically checked in, Koha should be able to trap that item for the next patron and send a notification to that patron that a hold is waiting for them. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 39

[Bug 36481] New: Add GET /libraries/:library_id/cash_registers
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36481 Bug ID: 36481 Summary: Add GET /libraries/:library_id/cash_registers Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com CC: tomascohen(a)gmail.com I propose to add an endpoint for fetching a library's list of cash registers. Context is bug 36237. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 24

[Bug 29846] New: Missing documentation system preferences for Overdrive
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29846 Bug ID: 29846 Summary: Missing documentation system preferences for Overdrive Change sponsored?: --- Product: Koha Version: 21.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Documentation Assignee: koha-bugs(a)lists.koha-community.org Reporter: mik(a)adminkuhn.ch QA Contact: testopia(a)bugs.koha-community.org There are four system preferences that are not documented in the Koha manual. * OverDriveAuthName * OverDriveUsername * OverDrivePasswordRequired * OverDriveWebsiteID Some hints are given in https://bywatersolutions.com/education/overdrive-integration-in-koha -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 17856] New: Add API endpoint for item types
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17856 Bug ID: 17856 Summary: Add API endpoint for item types Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Web services Assignee: koha-bugs(a)lists.koha-community.org Reporter: josef.moravec(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 34008] New: REST API: Add a list (GET) endpoint for itemtypes
by bugzilla-daemon＠bugs.koha-community.org 22 Jul '24

22 Jul '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34008 Bug ID: 34008 Summary: REST API: Add a list (GET) endpoint for itemtypes Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com CC: tomascohen(a)gmail.com -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 35