[Bug 34612] New: SCO module should display error message when attempting to log in with wrong username and password
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 Bug ID: 34612 Summary: SCO module should display error message when attempting to log in with wrong username and password Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Self checkout Assignee: koha-bugs@lists.koha-community.org Reporter: lucas@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org To recreate: 1. Enable WebBasedSelfCheck 2. Have SelfCheckoutByLogin set to 'username and password' 3. Go to /cgi-bin/koha/sco/sco-main.pl and try login in with erroneous login credentials. 4. Screen flashes and the user is returned to blank login screen with no indication of what has gone wrong. 5. Switch 'SelfCheckoutByLogin' to 'cardnumber' and try an erroneous card number 6. See the message: Sorry The userid X was not found in the database. Please try again. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 --- Comment #1 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- Hm, isn't this a security issue? We should not confirm existance or non-existance of the userid? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 --- Comment #2 from Lucas Gass <lucas@bywatersolutions.com> --- (In reply to Katrin Fischer from comment #1)
Hm, isn't this a security issue? We should not confirm existance or non-existance of the userid?
You mean when 'SelfCheckoutByLogin' is set to 'cardnumber'? I can see how that is problematic. But when it is set to 'username and password' we should be able to display a message saying your password/username combo is incorrect, right? This is a usability problem for users. It's pretty confusing for users to just see a screen flash with no indication of what is going wrong. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 --- Comment #3 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- I think we can do that - similar to the OPAC one maybe? -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 Lucas Gass <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|enhancement |normal -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 --- Comment #4 from Lucas Gass <lucas@bywatersolutions.com> --- (In reply to Katrin Fischer from comment #3)
I think we can do that - similar to the OPAC one maybe?
+1 -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 Joe Salamon <jsalamon@cuyahogalibrary.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsalamon@cuyahogalibrary.or | |g --- Comment #5 from Joe Salamon <jsalamon@cuyahogalibrary.org> --- The functionality Cuyahoga is seeking would be very basic to mitigate privacy or security concerns. After submitting invalid barcode-username and/or PIN-password info on the SCO login screen only, the software would return a generic text display similar to: "Login information is not valid. Please try again." -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34612 Lucas Gass (lukeg) <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #6 from Lucas Gass (lukeg) <lucas@bywatersolutions.com> --- *** This bug has been marked as a duplicate of bug 39217 *** -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org