https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42383 --- Comment #78 from Tomás Cohen Arazi (tcohen) <tomascohen@gmail.com> --- Re-uploaded the whole series. While working on point 23 we reworked the module policy design: instead of a header (signed JWT, then plain JSON), the policy is now returned as an optional, well-defined 'policy' attribute of the error object (module_policy envelope with typed 'global' and 'checkin' blocks, validated against the spec), the same structure the page is bootstrapped with. As it was a design change, it is folded into the original patches that introduced the policy code, so the 'Prevent module policies from overriding globals' and 'Send module policies as plain JSON' follow-ups are gone. All the other QA follow-ups are unchanged and still one per point. -- You are receiving this mail because: You are watching all bug changes.