- Koha-bugs - lists.koha-community.org

[Bug 39182] New: Make "Current on-site checkouts allowed" column display depend on OnSiteCheckouts system preference
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39182 Bug ID: 39182 Summary: Make "Current on-site checkouts allowed" column display depend on OnSiteCheckouts system preference Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com We already have some columns in the circulation rules table that depend on system preferences. This allows to lighten the (humongous) table and not have columns that are not taken into account anyway because the system preference is not enabled (see article request columns). On-site checkouts are not allowed if the OnSiteCheckouts system preference is not enabled. We could hide the related column in the circulation rules if the system preference is disabled. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 6

[Bug 7508] Collapsable items on items tab
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7508 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |additional_work_needed -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 7508] Collapsable items on items tab
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7508 Pedro Amorim <pedro.amorim(a)ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pedro.amorim(a)ptfs-europe.co | |m --- Comment #24 from Pedro Amorim <pedro.amorim(a)ptfs-europe.com> --- Created attachment 178505 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=178505&action=e… ERMSideBar This commit: https://github.com/Koha-Community/Koha/commit/a4531fd Is causing unintended style changes to ERM's sidebar menu. Picture on the left is how it was before, picture on the right is how it is now. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38378] New: Can't delete frequencies due to stray cud- in del op
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38378 Bug ID: 38378 Summary: Can't delete frequencies due to stray cud- in del op Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: lmstrand(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org serials/subscription-frequencies.pl has a delete op that was changed to cud-del when it shouldn't have been. This breaks the delete button's function. Existing subscription frequencies cannot be deleted and the button does nothing. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 38

[Bug 38463] New: Unnecessary CSRF token in OPAC authority search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38463 Bug ID: 38463 Summary: Unnecessary CSRF token in OPAC authority search Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: OPAC Assignee: phil(a)chetcolibrary.org Reporter: phil(a)chetcolibrary.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 37069 Bug 37069 correctly changed OPAC authority searches from a POST to a GET, but forgot to remove the CSRF token that is only needed for a POST, so now it clutters up the URL by making the first 107 characters of the query string meaningless. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37069 [Bug 37069] Authorities pagination on OPAC broken by CSRF -- You are receiving this mail because: You are watching all bug changes.

1 16

[Bug 38328] New: Cannot delete ILL batch statuses
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38328 Bug ID: 38328 Summary: Cannot delete ILL batch statuses Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: System Administration Assignee: phil(a)chetcolibrary.org Reporter: phil(a)chetcolibrary.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Depends on: 36192 You are permitted to delete ILL batch statuses that you (rather than the system) add, but the UI didn't get the CSRF memo about delete ops needing to be POSTs with op="cud-delete", so it still uses a GET of ?op="delete" and fails. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha -- You are receiving this mail because: You are watching all bug changes.

1 14

[Bug 38309] New: Cannot delete additional fields
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38309 Bug ID: 38309 Summary: Cannot delete additional fields Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com To recreate: 1 - Browse to Administration->Additional fields 2 - Click 'Invoices (aqinvoices)' 3 - Click 'New field' 4 - Fill out form and save 5 - See the new fiellisted 6 - Click 'Delete', confirm 7 - Screen goes blank 8 - Try to click 'Additional fields' in breadcrumb, no action 9 - Click 'Administration' in breadcrums 10 - Go to Additional fields->Invoices 11 - Your field is still there -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 19

[Bug 37961] New: Inventory followup fails by POSTing without an op or csrf_token
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37961 Bug ID: 37961 Summary: Inventory followup fails by POSTing without an op or csrf_token Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Keywords: regression, rel_24_05_candidate Severity: major Priority: P1 - high Component: Tools Assignee: phil(a)chetcolibrary.org Reporter: phil(a)chetcolibrary.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 36192 After you upload a file or textarea of barcodes to inventory, the next step is a list of the things that were missing, with checkboxes to check when you find them, and buttons to Mark seen, which send a POST to /cgi-bin/koha/tools/ajax-inventory.pl without an op param (since it doesn't have an $op) and without a csrf_token, so the POST fails with a 403. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha -- You are receiving this mail because: You are watching all bug changes.

1 16

[Bug 37914] New: Forms for budget planning filters and export should GET rather than POST
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37914 Bug ID: 37914 Summary: Forms for budget planning filters and export should GET rather than POST Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P3 Component: Acquisitions Assignee: phil(a)chetcolibrary.org Reporter: phil(a)chetcolibrary.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 36192 Blocks: 37728 Because of the bug 36192 CSRF protection, we intend not to have forms that POST without a param named 'op' with a value starting with 'cud-'. Because of bug 37728, a few were missed, including the 'Filters' form that lets you switch between planning budgets by month or by itemtype or by library, and the 'Export' form that lets you save your planning as a .csv file. Neither one has any need to POST, they can just be the GET they naturally are. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37728 [Bug 37728] More "op" are missing in POSTed forms -- You are receiving this mail because: You are watching all bug changes.

1 16

[Bug 37959] New: Item circulation alerts table appears to be broken
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '25

21 Feb '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37959 Bug ID: 37959 Summary: Item circulation alerts table appears to be broken Change sponsored?: --- Product: Koha Version: 24.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: esther.melander(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com To replicate: 1. Click on a cell in the table. The cell changes to save "Saving..." and then appears to become stuck. Nothing ever happens. Refreshing the page returns to the table to its original state. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 22