[Bug 8010] New: Search history can be added to the wrong patron
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8010 Priority: P5 - low Change sponsored?: --- Bug ID: 8010 Assignee: oleonard@myacpl.org Summary: Search history can be added to the wrong patron QA Contact: koha.sekjal@gmail.com Severity: enhancement Classification: Unclassified OS: All Reporter: anthony.laquerre@ccsr.qc.ca Hardware: All Status: NEW Version: rel_3_6 Component: OPAC Product: Koha Search history is added to the next person that log in. *EnableOpacSearchHistory is activated. 1- Go on your OPAC. 2- Dont log in. 3- Do couple of search. 4- Login your account (opac) 5- Click on search history. If you really login yourself that's okay. But for public computer, this is a big problem since it's not necessary you that will login next.. A patron ask us why there was so many search in his account. He was sure it was a security problem where a student was able to hack his account/the system. Tested on On ByWater- Koha demo site : 3.07.00.044 + our site : 3.6.0 Maybe the search history should be cleared once someone login ? Let me know if you need more infos. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8010 Owen Leonard <oleonard@myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|rel_3_6 |master --- Comment #1 from Owen Leonard <oleonard@myacpl.org> --- What you describe is a potential problem for public computers. It's a feature for non-public computers. A user on their home computer might have a different workflow: 1- Search the library's catalog on their computer 2- Find something they want to place a hold on, log in 3- Click on search history and find that their previous searches didn't get lost Since search history is tied to the user's session cookie, an improvement might be to get a fix for Bug 1627 and set up a lower timeout on OPAC sessions. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8010 Marc Véron <veron@veron.ch> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |http://bugs.koha-community. | |org/bugzilla3/show_bug.cgi? | |id=1627 CC| |veron@veron.ch --- Comment #2 from Marc Véron <veron@veron.ch> --- Still valid? -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org