[Bug 8155] New: Comply with UK Electronic Commerce (EC Directive) Regulations 2002
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8155 Priority: P5 - low Change sponsored?: Sponsored Bug ID: 8155 Assignee: oleonard@myacpl.org Summary: Comply with UK Electronic Commerce (EC Directive) Regulations 2002 Severity: critical Classification: Unclassified OS: All Reporter: mjr@software.coop URL: http://opac/ Hardware: All Status: ASSIGNED Version: unspecified Component: OPAC Product: Koha The full details are on http://www.ico.gov.uk/for_organisations/privacy_and_electronic_communication... but as I understand it we need a way to avoid setting any cookies on the OPAC until the user has been warned and consented. I intend to destroy the session and cookie in C4::Auth::get_template_and_user() just before it is sent back to the OPAC, as long as no cookie-using features are enabled; and to add a small notice to the OPAC login forms. I am marking this as critical because it means Koha should not be used in the UK (arguably the whole EU) in public until this bug is fixed. Koha admins should ensure that a cookie notification is included in their staff user agreements/policies, to cover the intranet interface. (You can also do that if your OPAC is not public, rather than apply this fix.) A patch, sponsored by software.coop, will be along shortly. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8155 --- Comment #1 from MJ Ray (software.coop) <mjr@software.coop> --- Created attachment 9775 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=9775&action=edit bug 8155 - comply with UK Electronic Commerce (EC Directive) Regulations 2002 C4/Auth.pm: destroy the session and cookie if it is not needed installer/data/mysql/sysprefs.sql: change default for EnableOpacSearchHistory koha-tmpl/intranet-tmpl/prog/en/modules/admin/preferences/opac.pref: add note about this law koha-tmpl/opac-tmpl/prog/en/modules/opac-auth.tt: add div#cookiewarning with consent request -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8155 MJ Ray (software.coop) <mjr@software.coop> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8155 Chris Nighswonger <cnighswonger@foundations.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cnighswonger@foundations.ed | |u Assignee|oleonard@myacpl.org |mjr@software.coop --- Comment #2 from Chris Nighswonger <cnighswonger@foundations.edu> --- Correcting assignment -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8155 MJ Ray (software.coop) <mjr@software.coop> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |ASSIGNED --- Comment #3 from MJ Ray (software.coop) <mjr@software.coop> --- oleonard has pointed out that I need to exempt the cart cookie and probably the KohaOpacLanguage cookie. Falling back while I code a new patch. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8155 --- Comment #4 from MJ Ray (software.coop) <mjr@software.coop> --- The responsible government agency has backed down at the last minute http://www.guardian.co.uk/technology/2012/may/26/cookies-law-changed-implied... so as long as libraries have a current privacy policy that mentions the cookies used by Koha (CGISESSID, KohaOpacLanguage, KohaOpacRecentSearches, bib_list... any others?), they should not be prosecuted for now. I still think we should avoid setting cookies until we need them, but with the imminent kohacon, I'm putting this onto a backburner. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8155 Paul Poulain <paul.poulain@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |paul.poulain@biblibre.com Severity|critical |enhancement --- Comment #5 from Paul Poulain <paul.poulain@biblibre.com> --- lowering this bug to enhancement, as it's no more a CRI pb for UK -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org