[Bug 13342] Not logged in user can place a review/comment as a deleted patron
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13342 --- Comment #3 from Alexandre Noel <alexandre.noel@inlibro.com> --- Created attachment 168286 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=168286&action=edit Bug 13342 - Not logged in user can place a review/comment as a deleted patron I find out the post comments page allows not logged in user, so I simply deleted the relevant line. 1. Apply the patch 2. Log in to OPAC. 3. Find a Biblio and open the comments tab. 4. Open another tab/window, and log out from that page. 5. Return to the first page. 6. Click "Post your comments on this title." --> You should be redirected to the login page in a new window. 7. In the new window, log in again. 8. Write a comment but don't submit it. 9. In the seconf tab, log out from the account. 10. Return to the form post comments and click "Submit and close this window" --> You should be redirected to the login page. -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org