https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39375 Bug ID: 39375 Summary: About page accessible to low privileged staff users Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: About Assignee: koha-bugs@lists.koha-community.org Reporter: dcook@prosentient.com.au QA Contact: testopia@bugs.koha-community.org At the moment, anyone with staff interface access can visit the About page at about.pl. There's privileged information available via that interface -- This is something we seem to acknowledge in koha-tmpl/intranet-tmpl/prog/en/modules/circ/returns.tt: <p class="problem ret_datacorrupt">The item has not been checked in due to a configuration issue in your system. You must ask an administ rator to take a look at the <a href="/cgi-bin/koha/about.pl#sysinfo_panel">about page</a> and correct all errors shown on the "System information" tab</p> That said, koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt says <div class="dialog message">ILL module configuration problem. Take a look at the <a href="/cgi-bin/koha/about.pl#sysinfo_panel">about page</a></div> So we should probably update ill-requests.tt to match returns.tt -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.