[Bug 37165] New: Can't edit frequencies due to stray cud- in modify op
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Bug ID: 37165 Summary: Can't edit frequencies due to stray cud- in modify op Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Serials Assignee: phil@chetcolibrary.org Reporter: phil@chetcolibrary.org QA Contact: testopia@bugs.koha-community.org Blocks: 36192 serials/subscription-frequencies.pl has two modify ops: a POST with cud-savemod changes the frequency, and a GET with modify loads the editing form, except that was changed to cud-modify when it shouldn't have been. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Phil Ringnalda <phil@chetcolibrary.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 --- Comment #1 from Phil Ringnalda <phil@chetcolibrary.org> --- Created attachment 168006 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=168006&action=edit Bug 37165: Can't edit frequencies due to stray cud- in modify op The op modify in subscription-frequencies.pl isn't a cud- operation, it's a GET of the editing form, so it shouldn't have been changed to cud-modify. Test plan: 1. Don't apply the patch yet 2. Serials - Manage frequencies - for any frequency click Edit 2. Note that the editing form is empty 3. Apply patch, restart_all 4. Repeat step 2, note that now the editing form has the existing data 5. Change anything, Display order is nice, and save to verify that cud-savemod still works -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Brendan Lawlor <blawlor@clamsnet.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Signed Off -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Brendan Lawlor <blawlor@clamsnet.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #168006|0 |1 is obsolete| | --- Comment #2 from Brendan Lawlor <blawlor@clamsnet.org> --- Created attachment 168026 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=168026&action=edit Bug 37165: Can't edit frequencies due to stray cud- in modify op The op modify in subscription-frequencies.pl isn't a cud- operation, it's a GET of the editing form, so it shouldn't have been changed to cud-modify. Test plan: 1. Don't apply the patch yet 2. Serials - Manage frequencies - for any frequency click Edit 2. Note that the editing form is empty 3. Apply patch, restart_all 4. Repeat step 2, note that now the editing form has the existing data 5. Change anything, Display order is nice, and save to verify that cud-savemod still works Signed-off-by: Brendan Lawlor <blawlor@clamsnet.org> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Brendan Lawlor <blawlor@clamsnet.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |blawlor@clamsnet.org -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Nick Clemens (kidclamp) <nick@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Passed QA -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Nick Clemens (kidclamp) <nick@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #168026|0 |1 is obsolete| | --- Comment #3 from Nick Clemens (kidclamp) <nick@bywatersolutions.com> --- Created attachment 168111 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=168111&action=edit Bug 37165: Can't edit frequencies due to stray cud- in modify op The op modify in subscription-frequencies.pl isn't a cud- operation, it's a GET of the editing form, so it shouldn't have been changed to cud-modify. Test plan: 1. Don't apply the patch yet 2. Serials - Manage frequencies - for any frequency click Edit 2. Note that the editing form is empty 3. Apply patch, restart_all 4. Repeat step 2, note that now the editing form has the existing data 5. Change anything, Display order is nice, and save to verify that cud-savemod still works Signed-off-by: Brendan Lawlor <blawlor@clamsnet.org> Signed-off-by: Nick Clemens <nick@bywatersolutions.com> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)| |24.11.00 released in| | -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 --- Comment #4 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- Pushed for 24.11! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Lucas Gass <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable Version(s)|24.11.00 |24.11.00,24.05.02 released in| | CC| |lucas@bywatersolutions.com --- Comment #5 from Lucas Gass <lucas@bywatersolutions.com> --- Backported to 24.05.x for upcoming 24.05.02 -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Fridolin Somers <fridolin.somers@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fridolin.somers@biblibre.co | |m Status|Pushed to stable |Needs documenting --- Comment #6 from Fridolin Somers <fridolin.somers@biblibre.com> --- Full CSRF not in 23.11.x -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 David Nind <david@davidnind.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Text to go in the| |This fixes the serials release notes| |frequency edit form so that | |they can be edited (Serials | |> Manage frequencies > | |select edit action for a | |frequency). Before this, | |you couldn't edit the | |frequency - the form was | |empty. (This is related to | |the CSRF changes added in | |Koha 24.05 to improve form | |security.) CC| |david@davidnind.com -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37165 Phil Ringnalda <phil@chetcolibrary.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs documenting |RESOLVED Resolution|--- |FIXED --- Comment #7 from Phil Ringnalda <phil@chetcolibrary.org> --- Nothing to document, just fixed a bug. -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org