https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33905 --- Comment #20 from David Cook <dcook@prosentient.com.au> --- Technically, Patron A's cardnumber being used for Patron B's userid, or Patron A's userid being used for Patron B's cardnumber is only a real problem in two scenarios: 1. They share the same password 2. A cardnumber or userid is used for looking up a patron without the patron authenticating that cardnumber/userid with their password In theory, the second scenario should be mostly solved by bug 36575 although there are other places in Koha where we look up users with cardnumber, which is a terrible idea... -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.