January 2026 - Koha-bugs - lists.koha-community.org

[Bug 40546] New: Add access control layer using RBAC (Role-Based Access Control) + ABAC (Attribute-Based Access Control)
by bugzilla-daemon＠bugs.koha-community.org 02 Mar '26

02 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40546 Bug ID: 40546 Summary: Add access control layer using RBAC (Role-Based Access Control) + ABAC (Attribute-Based Access Control) Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org The idea here is that you have roles "LibraryAdmin", "CircDesk", "Cataloguing", etc. We would probably attach the roles to patron categories (ie groups) and patrons. Separately we'd have an attribute-based policy. Typically, you have a "subject" (ie Logged in user), "action" (RunReport), and "object" (Report 42). Sometimes you'll also have a "condition"/"context" (LoggedInBranch CPL). This attribute-based policy could then be assigned to a role or a patron. I expect broad policies would be applied at the role level, and then more specific policies would be applied at the patron level. We might find that we rarely or never use them at the patron-level, but probably good to allow for that level of specificity. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 11

[Bug 41202] New: Remove the negcap field
by bugzilla-daemon＠bugs.koha-community.org 02 Mar '26

02 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41202 Bug ID: 41202 Summary: Remove the negcap field Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Accessibility Assignee: koha-bugs(a)lists.koha-community.org Reporter: jake.deery(a)openfifth.co.uk QA Contact: testopia(a)bugs.koha-community.org CC: martin.renvoize(a)openfifth.co.uk, matt.blenkinsop(a)openfifth.co.uk, oleonard(a)myacpl.org On the opac-suggestions page, there is a visually hidden negcap field. It is terrible for accessibility, and seems only to exist to halt bots – which seems unnecessary, given how this page requires users to log in anyway. I propose we remove this field entirely, with possible future development to use some other sort of captcha on this page, if it is deemed necessary. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 15

[Bug 37346] New: The VirtualShelf object should have an 'owner' accessor to return the related owner Koha::Patron
by bugzilla-daemon＠bugs.koha-community.org 02 Mar '26

02 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37346 Bug ID: 37346 Summary: The VirtualShelf object should have an 'owner' accessor to return the related owner Koha::Patron Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl We should add an 'owner' accessor to Koha::Virtualshelf that returns the Koha::Patron who owns the List. The cleanest approach would be to rename the current 'owner' database field to 'owner_id' and then write the usual Koha::Object relation wrapper into Koha::Virtualshelf. This would improve code consistency and allow for access to the owner directly from the object in notices. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 17

[Bug 32266] New: Large amount of late orders slows the service
by bugzilla-daemon＠bugs.koha-community.org 02 Mar '26

02 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32266 Bug ID: 32266 Summary: Large amount of late orders slows the service Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: emmi.takkinen(a)koha-suomi.fi QA Contact: testopia(a)bugs.koha-community.org Almost all our library consortiums have large amounts of late orders. Smallest amount is around 2000, but largest is over 25000. Even with batch of 2000 orders, lateorders.pl takes over 40 seconds to open. Handling larger batches eventually leads to a Proxy error. One (quite easy imo) way to speed up fetching late orders is to add a syspref to set default value for late order filter "Order date: [] days ago". -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 51

[Bug 41152] New: RESERVE_EXPIRED accountline should include expired hold's cancellation reason and item title when available
by bugzilla-daemon＠bugs.koha-community.org 02 Mar '26

02 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41152 Bug ID: 41152 Summary: RESERVE_EXPIRED accountline should include expired hold's cancellation reason and item title when available Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Fines and fees Assignee: koha-bugs(a)lists.koha-community.org Reporter: lmstrand(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org When running the cronjob cancel_expired_holds.pl you can pass a cancellation reason to the script with a trigger. This reason does not get recorded in the accountline that gets generated for the fee if there's a charge/cancellation fee set. This data would be useful when printing slips/generating messages for said accountline/patron. The accountline creation happens in /Koha/Hold.pm module's cancel method. It would also be informative to record the title of the item that caused the expired hold fee to generate into the database in the description field. Passing a reason to the cancel_expired_holds.pl script also causes an email message to be generated for the patron with the notice with HOLD_CANCELLATION code (which does not exist in Koha by default atm. and thus does not get created and spams a 'No reserves HOLD_CANCELLATION letter transported by email' error to the cron's log instead). -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2

[Bug 39483] New: Update staff interface forms to use grid layout
by bugzilla-daemon＠bugs.koha-community.org 02 Mar '26

02 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39483 Bug ID: 39483 Summary: Update staff interface forms to use grid layout Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org I would like to propose a new standard for how we display forms in the staff interface. Using CSS grids we can make forms more flexible and responsive. https://developer.mozilla.org/en-US/docs/Web/CSS/grid https://css-tricks.com/snippets/css/complete-guide-grid/ -- You are receiving this mail because: You are watching all bug changes.

1 26

[Bug 26657] New: "Unlinked" output of LinkBibHeadingsToAuthorities is ambiguous
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '26

01 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26657 Bug ID: 26657 Summary: "Unlinked" output of LinkBibHeadingsToAuthorities is ambiguous Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: MARC Bibliographic data support Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org LinkBibHeadingsToAuthorities reports "unlinked" if a $9 link is deleted and it reports "unlinked" if there is no $9 link. Those are very different states. It looks like LinkBibHeadingsToAuthorities is used by C4::Biblio::BiblioAutoLink (which doesn't use the output), and it is used by misc/link_bibs_to_authorities.pl, which does render the output. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 15

[Bug 29654] New: Add
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '26

01 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29654 Bug ID: 29654 Summary: Add Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: glasklas(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 33

[Bug 20859] New: SMS and other notification preferences during self registration
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '26

01 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20859 Bug ID: 20859 Summary: SMS and other notification preferences during self registration Change sponsored?: --- Product: Koha Version: 17.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org Some libraries would prefer the option for patrons to choose their notification preferences and setup their SMS information during registration. -- You are receiving this mail because: You are watching all bug changes.

1 36

[Bug 40310] New: New authority framework plugin for MARC21 (marc21_field_083a_authorities.pl)
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '26

01 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40310 Bug ID: 40310 Summary: New authority framework plugin for MARC21 (marc21_field_083a_authorities.pl) Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: MARC Authority data support Assignee: koha-bugs(a)lists.koha-community.org Reporter: a.roussos(a)dataly.gr QA Contact: testopia(a)bugs.koha-community.org Background information ---------------------- Dewey Decimal Classification (DDC) [1] numbers can be stored in MARC21 authority records as follows ('R' and 'NR' denoting 'Repeatable' and 'Non-Repeatable' fields/subfields, respectively): 082 - Dewey Decimal Call Number (R) 082$a - Classification number (NR) 083 - Dewey Decimal Classification Number (R) 083$a - Classification number element-single number or beginning number of span (NR) 083$b - Classification number element-ending number of span (NR) Since 2024, both MARC21 and UNIMARC standards have been updated to enable storing information in the form of Real World Object URIs, corresponding to either a single DDC number or a DDC number range. Such URIs are stored in MARC21 subfield 082$1 / 083$1. Here's an example provided by LoC: 083 0 0 $a 362.29/6 $2 23/eng/20190402 $1 https://id.oclc.org/worldcat/ddc/E36hxQKtFdbKrbpm3XkqkQVCQw For more information, please refer to the LoC website [2,3]: The OCLC Dewey Linked Data API ------------------------------ OCLC recently [4] started offering a Linked Data (LD) [5] API [6] that allows looking up DDC numbers to obtain unique URIs/URLs and Descriptions for a particular DDC number (or range). In addition to API searches, a smaller subset of the LD can also be browsed online in a hierarchical manner [7]. Reasoning behind this Bug report -------------------------------- We believe that Koha users who include DDC numbers in their authority cataloguing would benefit from an integration with the OCLC Dewey LD API that would allow them to easily lookup DDCs in exchange for LD URIs/URLs and Descriptions. To this end, we propose the addition of a new Authority Framework plugin for MARC21 that will offer this functionality. This plugin builds on the groundwork laid by Bug 40308, in order to offer 1-click DDC lookups from within the Authorities cataloguing editor. References: [1] https://www.oclc.org/content/dam/oclc/dewey/versions/print/intro.pdf [2] https://www.loc.gov/marc/authority/ad082.html [3] https://www.loc.gov/marc/authority/ad083.html [4] https://www.oclc.org/en/news/releases/2024/20240815-uniform-resource-identi… [5] https://www.oclc.org/en/linked-data.html [6] https://developer.api.oclc.org/dewey-ld [7] https://entities.oclc.org/worldcat/ddc/ -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 6