[Bug 8689] New: Koha allows 'kohaadmin' SQL account to access web interface
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Priority: P5 - low Change sponsored?: --- Bug ID: 8689 CC: dpavlin@rot13.org Assignee: gmcharlt@gmail.com Summary: Koha allows 'kohaadmin' SQL account to access web interface Severity: normal Classification: Unclassified OS: All Reporter: mtj@kohaaloha.com Hardware: All Status: NEW Version: master Component: Authentication Product: Koha an example of the type of problem that this bug causes is discussed in bug-8221 ps: there is still one more patch needed here... a patch to create a 'KohaAdmin' super-librarian account, in the Koha 'borrower' table -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Mason James <mtj@kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Koha allows 'kohaadmin' SQL |Koha allows 'kohaadmin' |account to access web |$database account to access |interface |web interface -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Mason James <mtj@kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Koha allows 'kohaadmin' |disable login via Koha's |$database account to access |$database account |web interface | -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 --- Comment #1 from Mason James <mtj@kohaaloha.com> --- Created attachment 11835 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=11835&action=edit disable login to Koha, via the $database account -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |katrin.fischer@bsz-bw.de --- Comment #2 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- I think this is not so easy, because you also need a branch and a categorytype to create a patron in the borrowers table and those are different from library to library. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Magnus Enger <magnus@enger.priv.no> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |magnus@enger.priv.no --- Comment #3 from Magnus Enger <magnus@enger.priv.no> --- What should the status be here? Needs signoff or Failed QA? -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |ASSIGNED --- Comment #4 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- Existing patch is not enough, we need more to avoid using the database user. Switching back to ASSIGNED for now. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Magnus Enger <magnus@enger.priv.no> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |http://bugs.koha-community. | |org/bugzilla3/show_bug.cgi? | |id=9008 -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8689 Paul Poulain <paul.poulain@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED CC| |paul.poulain@biblibre.com Resolution|--- |WONTFIX --- Comment #5 from Paul Poulain <paul.poulain@biblibre.com> --- I think the bug 9008 that make the mysql login very proeminent fixes this problem. Reopen if you disagree. -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org