[Bug 36570] New: OAI-PMH - Hide items non-public notes
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36570 Bug ID: 36570 Summary: OAI-PMH - Hide items non-public notes Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Web services Assignee: koha-bugs@lists.koha-community.org Reporter: pablo.bianchi@gmail.com QA Contact: testopia@bugs.koha-community.org After enabling the expose of items (`include_items: 1` on `OAI-PMH:ConfFile`) the info of 952$x Non-public note (items.itemnotes_nonpublic) is shown, potentially exposing sensitive information. Not sure how a solution to this issue may interact with OpacHiddenItems. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36570 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook@prosentient.com.au See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=36090 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36570 --- Comment #1 from David Cook <dcook@prosentient.com.au> --- I noticed this a few months ago as well. Basically, the OAI-PMH isn't respecting the bibliographic frameworks in general, so other hidden fields would also be shown. This does need a fix... -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36570 --- Comment #2 from Pablo AB <pablo.bianchi@gmail.com> --- Right! Likewise, I notice data leakage (particularly through 9xx) while using marcxml, since Bug 19353 is relatively recent. Maybe a new syspref could define if the subfield OAI visibility state should honor the OPAC visibility flag (before passing through the XSLT (i.e., any metadataPrefix)). Usually, if the subfield should not be seen by humans, should not be seen by machines also. Could be OAI-PMH:HonorOPACVisibilityFlag. Or maybe rename the ancient visibility flag "Flagged" to "OAI" (no one knows its purpose, Bug 14772). -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36570 --- Comment #3 from David Cook <dcook@prosentient.com.au> --- I've also been wondering about adding a system preference like that. I suppose another option would be in the OAI config file. For instance, defaulting to honouring the OPAC visibility with an ability to override it on a per metadata format basis. That might actually be the best way to do it. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org