September 2024 - Koha-bugs - lists.koha-community.org

[Bug 37508] SQL reports should not show patron password hash if queried
by bugzilla-daemon＠bugs.koha-community.org 10 Sep '24

10 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37508 Inkeri Hakulinen <inkeri.hakulinen+bugz(a)helsinki.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |inkeri.hakulinen+bugz@helsi | |nki.fi --- Comment #73 from Inkeri Hakulinen <inkeri.hakulinen+bugz(a)helsinki.fi> --- Is there already somewhere a ready-made sql query that will select all the other fields of borrower table except the password? I have to admit, that I've used a simple query of borrowers as a starting point for many of my reports. If you use: "SELECT * FROM borrowers WHERE cardnumber=<<cardnumber>>", it's quite a handy tool. You get the accurate list of all the fields in borrowers-table and you can easily see, how the data is stored there, compared to what you see in Koha intranet on that patron's page. Then it's easy to build more complex reports, when you can see what data is in which field, and which code number means what. I've also used my simple query to some bug tracking purporses. However, now, firstly, you have to write a pretty long SQL query compared to this old one, and then later you have to keep track of the possible changes to the fields of borrowers table (although I suppose that won't happen so often). I hope you find some solution so that "Select * from borrowers" will be possible in the future. The idea of passwords in a different table sounds ok for a main user like me. I understand the privacy concern behind this solution, but now this takes some tools away from superlibrarians who don't have direct access to the server. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37508] SQL reports should not show patron password hash if queried
by bugzilla-daemon＠bugs.koha-community.org 10 Sep '24

10 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37508 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Text to go in the| |This enhancement on reports release notes| |module prevents SQL queries | |from being run if they | |would return a password | |field from the database | |table. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36863] CSRF Plack middleware doesn't handle the CONNECT HTTP method
by bugzilla-daemon＠bugs.koha-community.org 10 Sep '24

10 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36863 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Needs documenting --- Comment #16 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- Depends on Bug 34478 not in 23.11.x -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 37074] Comment approval and un-approval should be CSRF-protected
by bugzilla-daemon＠bugs.koha-community.org 10 Sep '24

10 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37074 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Needs documenting --- Comment #10 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- CSRF with "cud-" not backported to 23.11.x -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15449] [Omnibus] Move stuff to the Koha namespace
by bugzilla-daemon＠bugs.koha-community.org 10 Sep '24

10 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15449 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |37876 --- Comment #25 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Bug 37876 - Move C4::Serials code to the Koha namespace Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37876 [Bug 37876] Move C4::Serials code to the Koha namespace -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36448] New: aqplan showing AV cat starting with "A" (?)
by bugzilla-daemon＠bugs.koha-community.org 10 Sep '24

10 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36448 Bug ID: 36448 Summary: aqplan showing AV cat starting with "A" (?) Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org 122 my $sth = $dbh->prepare("select distinct category from authorised_values where category like 'A%' ") What is that?! http://localhost:8081/cgi-bin/koha/admin/aqplan.pl?budget_period_id=1&authc… On the left " Select planning type:" you can see "By AR_CANCELLATION". That does not make any sense! -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2

[Bug 36803] New: Search facet "languages" should resolve to language name using database definitions
by bugzilla-daemon＠bugs.koha-community.org 09 Sep '24

09 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36803 Bug ID: 36803 Summary: Search facet "languages" should resolve to language name using database definitions Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching - Elasticsearch Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de I think the recent work on facets might have broken this behavior. We now only see the language code in the facets. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 4

[Bug 36396] New: Link facet with authorised value category
by bugzilla-daemon＠bugs.koha-community.org 09 Sep '24

09 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36396 Bug ID: 36396 Summary: Link facet with authorised value category Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Searching - Elasticsearch Assignee: jonathan.druart(a)gmail.com Reporter: jonathan.druart(a)gmail.com In order to display descriptions instead of codes we will add a link to an authorised value category. -- You are receiving this mail because: You are watching all bug changes.

1 46

[Bug 20588] New: Elasticsearch - Apply dataTable on search fields and mapping tables
by bugzilla-daemon＠bugs.koha-community.org 09 Sep '24

09 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20588 Bug ID: 20588 Summary: Elasticsearch - Apply dataTable on search fields and mapping tables Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching - Elasticsearch Assignee: koha-bugs(a)lists.koha-community.org Reporter: alex.arnaud(a)biblibre.com Apply dataTable on search fields and mapping tables to be able to sort and filter data. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 36

[Bug 20388] New: Elasticsearch - Ability to add index from UI
by bugzilla-daemon＠bugs.koha-community.org 09 Sep '24

09 Sep '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20388 Bug ID: 20388 Summary: Elasticsearch - Ability to add index from UI Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching - Elasticsearch Assignee: koha-bugs(a)lists.koha-community.org Reporter: alex.arnaud(a)biblibre.com Currently indexes only coming from mapping.yaml. We need to add some using UI (admin/searchengine/elasticsearch/mappings.pl) -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 213