- Koha-bugs - lists.koha-community.org

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 14 Mar '24

14 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 --- Comment #187 from Jonathan Druart <jonathan.druart(a)gmail.com> --- *** Bug 35677 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 31306] New: Add Koha::Items->search_ordered method
by bugzilla-daemon＠bugs.koha-community.org 14 Mar '24

14 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31306 Bug ID: 31306 Summary: Add Koha::Items->search_ordered method Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart+koha(a)gmail.com Reporter: jonathan.druart+koha(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org On bug 27272 we are going to replace C4::Items::GetItemsInfo with Koha::Items methods, but we need to keep the existing behaviour that is: Order by publisheddate, enumchron for searisl, or by homebranch.branchname, enumchron, LPAD( copynumber, 8, '0' ), desc dateaccessioned -- You are receiving this mail because: You are watching all bug changes.

1 36

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 13 Mar '24

13 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36195 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36195 [Bug 36195] CSRF - testing reports -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 13 Mar '24

13 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36193 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36193 [Bug 36193] CSRF - Code review missed -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15277] Add Template Toolkit syntax for slips and notices to editor
by bugzilla-daemon＠bugs.koha-community.org 13 Mar '24

13 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15277 Lisette Scheer <lisette.scheer(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lisette.scheer@bywatersolut | |ions.com --- Comment #1 from Lisette Scheer <lisette.scheer(a)bywatersolutions.com> --- Could we do this with codemirror support similar to the reports? -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36102] Protect login forms from CSRF attacks
by bugzilla-daemon＠bugs.koha-community.org 13 Mar '24

13 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36102 Nick Clemens <nick(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36308 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36308 [Bug 36308] SIP2 login broken by CSRF changes -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12723] Add separate fee for renewal of rental items
by bugzilla-daemon＠bugs.koha-community.org 13 Mar '24

13 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12723 JR <jrudisill(a)cityofchesapeake.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jrudisill@cityofchesapeake. | |net -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 35762] New: Add option to send WELCOME notice immediately
by bugzilla-daemon＠bugs.koha-community.org 12 Mar '24

12 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35762 Bug ID: 35762 Summary: Add option to send WELCOME notice immediately Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisette.scheer(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Currently the welcome notice sends as part of the message queue. You can create a separate process_message_queue.pl for it, but it's not quote the same. It would be helpful for libraries to have the option to send an immediate email to new patrons. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 36123] New: Visibility setting in framework for the 856$u not being followed in OPAC or Staff interface
by bugzilla-daemon＠bugs.koha-community.org 12 Mar '24

12 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36123 Bug ID: 36123 Summary: Visibility setting in framework for the 856$u not being followed in OPAC or Staff interface Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: esther.melander(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl I tested this behavior on 23.05 and two test sites for 23.11. To replicate: 1. Check the default framework and ensure the 856$u is visible in the OPAC and Staff Interface. Ensure the URL box is checked. 2. Find a record in the default framework. 3. Add a link like https://www.google.com to the 856$u and Google to the 856$y 4. View the record in the record detail view and the OPAC. Click the link to make sure it works. 5. Now edit the default framework and uncheck the box for OPAC visibility. Leave all other settings as is. 6. Look at the record in the OPAC again and see that the Online Resource and link is still showing. Click on the link and see that it returns an error page. 7. Look at the record in the Staff interface and click on the link and see it is successful. 8. Edit the default framework again. Uncheck the box for Staff visibility and check the box for URL. 9. Click on the URL in the Staff Interface and the link works. 10. Edit the default framework and leave the visibility for the Staff Interface unchecked and uncheck the box for URL. 11. Test the link again in the staff interface and see the link is visible and works. A combination of checking/unchecking visibility boxes and the URL box seems to result in inconsistent behavior. Disabling the URL sometimes returns an error page, sometimes does not. Most concerning is the visibility, which is being completely ignored. In some cases, it is preferable to hide the URL in the OPAC and still have it visible in the Staff Interface with a working link. There are two current work arounds: 1. Disable the URL so that the link returns an error (though one could hover over the link and see what it is) which doesn't work consistently. 2. Removing the URL from the record seems to be the only way to not display the URL in the OPAC, but that also removes it from the staff interface. I would expect the 856$u to not be visible if the OPAC or Staff visibility was unchecked. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 2906] Holds ratios report should have more filters
by bugzilla-daemon＠bugs.koha-community.org 12 Mar '24

12 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2906 Chip Halvorsen <Chip.Halvorsen(a)WestlakeLibrary.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Chip.Halvorsen@WestlakeLibr | |ary.org --- Comment #6 from Chip Halvorsen <Chip.Halvorsen(a)WestlakeLibrary.org> --- Our selectors asked for a way to remove items with the location Express from consideration in the ratios. Item types assigned to our Express location are non-holdable. Would it be feasible to at least add a checkbox option that would exclude item types that listed as No Holds Allowed under "Default holds policy by item type" in the circulation rules? -- You are receiving this mail because: You are watching all bug changes.

1 0