http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=2811 Summary: OpacRenewalAllowed not checked everywhere Product: Koha Version: unspecified Platform: PC OS/Version: All Status: NEW Severity: normal Priority: P3 Component: Circulation AssignedTo: nahuel.angelinetti@biblibre.com ReportedBy: nahuel.angelinetti@biblibre.com QAContact: koha-bugs@lists.koha.org There are some "security" failure about this syspref. 1) in opac-user.pl, if there is an overdue and opacrenewalallowed="off" the renew button is showed, and it works. 2) in opac-renew.pl, it's only checked as "CanBookBeRenewed()", but do not check if opacrenewalallowed is to on, so if a user enter manually the url, he can renew the document. ------- You are receiving this mail because: ------- You are the QA contact for the bug, or are watching the QA contact.