http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13917 Bug ID: 13917 Summary: OPAC: Still accessible by URL even if turned off by system preference Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: OPAC Assignee: oleonard@myacpl.org Reporter: veron@veron.ch QA Contact: testopia@bugs.koha-community.org To reproduce: 1) In staff client, set System preference 'RequestOnOpac' to 'Allow patrons to place holds on items from the OPAC.' 2) Log in to OPAC with a patron' credentials, search a record, place hold without confirming, copy URL, something like [YOUR SERVER]/cgi-bin/koha/opac-reserve.pl?biblionumbers=1 3) In staff client, set System preference 'RequestOnOpac' to 'Don't allow patrons to place holds on items from the OPAC.' 4) Log out. Log in again in OPAC. 5) Paste URL in browser's address bar Result: Page displays, you can put a hold on the requested item. Expected: 404 page, similar to solution for Bug 12703 -- You are receiving this mail because: You are watching all bug changes.