March 2025 - Koha-bugs - lists.koha-community.org

[Bug 28907] Potential unauthorized access in public REST routes
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '25

06 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28907 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #177681|1 |0 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 28907] Potential unauthorized access in public REST routes
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '25

06 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28907 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #179000|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 28907] Potential unauthorized access in public REST routes
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '25

06 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28907 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #176710|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 35402] Update the OPAC and staff interface to Bootstrap 5
by bugzilla-daemon＠bugs.koha-community.org 05 Mar '25

05 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35402 Andrew Fuerste-Henry <andrew(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |39258 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39258 [Bug 39258] Remove extra Delete button in report preview modal -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 39257] New: Add permission to block staff-initiated item-level holds
by bugzilla-daemon＠bugs.koha-community.org 05 Mar '25

05 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39257 Bug ID: 39257 Summary: Add permission to block staff-initiated item-level holds Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: jjayne(a)luzernelibraries.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Some libraries would like the ability to block some staff from placing item-level holds. Adding a new permission would give librarians the ability to allow some staff to place item-level holds while preventing others from doing so. Especially applicable in a consortial setting. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 28907] Potential unauthorized access in public REST routes
by bugzilla-daemon＠bugs.koha-community.org 05 Mar '25

05 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28907 --- Comment #70 from Paul Derscheid <paul.derscheid(a)lmscloud.de> --- Created attachment 179000 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=179000&action=e… Bug 28907: [With corrected bug id] REST - Remove allow-owner from public password route To test: 1. prove t/db_dependent/api/v1/patrons_password.t 2. Apply patch 3. prove t/db_dependent/api/v1/patrons_password.t Observe success in both cases. https://bugs.koha-community.org/show_bug.cgi?id=28907 Signed-off-by: Victor Grousset/tuxayo <victor(a)tuxayo.net> Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 39240] New: Configure search fields for Z39.50 searches in OCLC and SkyRiver
by bugzilla-daemon＠bugs.koha-community.org 05 Mar '25

05 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39240 Bug ID: 39240 Summary: Configure search fields for Z39.50 searches in OCLC and SkyRiver Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Z39.50 / SRU / OpenSearch Servers Assignee: koha-bugs(a)lists.koha-community.org Reporter: jeanne.mauriello(a)mainlib.org QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl We are migrating to Koha on March 24, 2025. Our library consortium uses both OCLC and SkyRiver for Z39.50 searches. In Koha we need more search options. For OCLC we need to be able to search on UPC, OCLC number, and publisher number. OCLC does not have a specific UPC index, so it would need to be mapped differently. In Polaris we use the "other system number" option. We would need the same search options in SkyRiver, with the exception of OCLC number. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4

[Bug 28907] Potential unauthorized access in public REST routes
by bugzilla-daemon＠bugs.koha-community.org 05 Mar '25

05 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28907 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Text to go in the|25.05.00,24.11.02,24.05.07, | release notes|23.11.12,22.11.24 | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 28907] Potential unauthorized access in public REST routes
by bugzilla-daemon＠bugs.koha-community.org 05 Mar '25

05 Mar '25

1 0

[Bug 39239] New: Add an optional default manageddate filter to speed up loading suggestions
by bugzilla-daemon＠bugs.koha-community.org 05 Mar '25

05 Mar '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39239 Bug ID: 39239 Summary: Add an optional default manageddate filter to speed up loading suggestions Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Although you can archive suggestions and make the performance a bit better, it still takes quite long to load the suggestions page. I am proposing here to add a pref that controls the initial manageddate_from filter to further control the number of loaded suggestions. After loading the user can always change the filter. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6