March 2024 - Koha-devel - lists.koha-community.org

Koha CSRF protection
by Nick Clemens 13 Apr '24

13 Apr '24

Hello all! We have pushed the CSRF work from 34478 and related bugs today. We know there are more follow-ups needed, and have filed a series of bugs under an omnibus: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 We have a framapad where issues can be reported/found: https://annuel.framapad.org/p/koha_34478_remaining And we have bugs for each of the sections of the document. We need all developers to submit patches when they encounter issues, and for other users testing master to report found issues on the pad. Testers can report issues on the pad as well. There is a new coding guideline - all POSTs to forms in Koha will need to include a csrf token: https://wiki.koha-community.org/wiki/Coding_Guidelines#Security This has been a big work, many thanks to all involved, and there is still work to be done, but this is an important fix that we must do. You can reach out to me on IRC (kidclamp) or via email and I will do my best to help anyone contribute. Thanks, Nick -- Nick Clemens ByWater Solutions bywatersolutions.com Phone: (888) 900-8944 Pronouns: (he/him/his) Timezone: Eastern Follow us: <https://www.facebook.com/ByWaterSolutions/> <https://www.instagram.com/bywatersolutions/> <https://www.youtube.com/user/bywatersolutions> <https://twitter.com/ByWaterSolution>

5 7

Koha Community Newsletter: March 2024
by Koha Newsletter 28 Mar '24

28 Mar '24

The Koha Community Newsletter for March 2024 is here: https://koha-community.org/koha-community-newsletter-march-2024/ Many thanks to everyone who submitted articles and news to this newsletter! Please feel free to email me with any corrections or suggestions. -- Michael Kuhn Editor, Koha Community Newsletter

1 0

Elasticsearch sans Zebra
by David Cook 28 Mar '24

28 Mar '24

Hi all, I have started using Elasticsearch more with Koha, and we're at a point of wanting to use Elasticsearch without Zebra for Koha. I came across "Bug 21820 - Zebraqueue should not be added to when only Elasticsearch is used" and it seems like other people are interested in this too. I imagine it's just a case of getting a patch written? Overall, it's an idea that people support? David Cook Senior Software Engineer Prosentient Systems Suite 7.03 6a Glen St Milsons Point NSW 2061 Australia Office: 02 9212 0899 Online: 02 8005 0595

4 6

Elasticsearch indexing does not handle exceptions well
by David Cook 27 Mar '24

27 Mar '24

Hi all, I'm re-indexing Elasticsearch and I notice occasionally Elasticsearch will throw an exception when committing (e.g. Elasticsearch exception thrown: Request), and Koha just ignores it. That means that whole commit gets missed, so a default of 5000 records don't get indexed. You can probably find those inconsistencies using /usr/share/koha/bin/maintenance/compare_es_to_db.pl but that doesn't provide you a method for indexing those missed records either. Am I missing something obvious here? I'll need to look at increasing the verbosity to get more of the error message, and I'll play around with some settings to make it so that the Elasticsearch server doesn't thrown an error, but this seems weird to me. Perhaps we should have an automatic re-try, or at least a record of what records failed to be committed, so that they can be manually retried via a different mechanism? David Cook Senior Software Engineer Prosentient Systems Suite 7.03 6a Glen St Milsons Point NSW 2061 Australia Office: 02 9212 0899 Online: 02 8005 0595

1 0

REST API : PUT for partial update
by Fridolin SOMERS 21 Mar '24

21 Mar '24

Hi, I've tried to use API for a PUT on patron. Looks like I can't do a partial update, I get error on mandatory datas like if it where a POST. I found this discussion : https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23285#c8 Is this a bug ? Best regards, -- Fridolin SOMERS <fridolin.somers(a)biblibre.com> Software and system maintainer 🦄 BibLibre, France

2 4

The Global Bug Squashing Day just started (in Kiribati)!
by Magnus Enger 21 Mar '24

21 Mar '24

Kia ora, dear Community! If you are in Kiribati (or if you choose Kiribati as your time zone) you are in luck, because the Global Bug Squasing Day just started for you! More information and resources here: https://wiki.koha-community.org/wiki/2024-03-22_Global_bug_squashing_day I just copied some numbers related to different bug statuses into the wiki page, so we can try and see how much progress we made at the end. For more individual stats, you can try and see how far you can get your name up the lists for "March" (and "2024") on the dashboard: https://dashboard.koha-community.org/ But don't get too hung up on those numbers either, *everything* helps and *everything* counts: - Answer a question on IRC or the mail lists - Add a comment in Bugzilla - Tall a friend about Koha :-) And most important: Have fun! Best regards, Magnus Libriotech/imCode

1 0

Ponderings on locations
by Wagner, Alexander 21 Mar '24

21 Mar '24

Hi! While migrating our catalogue to Koha I get quite confused with the location handling. Location for me is "the place where I have to go to fetch the item". So an item could be in the general collection `main reading room`, but I may have a special area there like an exhibition or a new items shelf. And it can be at it's usual location or at some temporary place. AFAIS Koha items have internally a `location` and a `permanent_location`. (In my still current world they'd be named `temporary location` (876__l) and `location` (aka `852__a`), respectively, so slightly the other way round.) Now, in item cataloguing the location I get exposed to the editor seems to be a mixture of `permanent_location` and `location`, in the sense that the editor always sets both. Using mappings for `UpdateItemLocationOnCheckin` however, some values are magic. If `CART` and `PROC` get mapped they only change the `location`, while all others change both. (I do understand that the magic value is used by some cron-job.) However, I wonder if the procedures were not more flexible and easier to understand if "any mapped location" juggles the `location` and leaves the `permanent_location`, while I do get both values in the item editor and the actual place where an item is is defined as `permanet_location` if there is no `location` set. There is already `_PERM_` to access the permanent location in mappings, but with the current logic it's value is gone once a non-magical location enters the game. IMHO one could achieve the same functionality like now by just clearing `location` once an item is back at it's permanent location. (At least this is how our old system does it right now.) Example: - We order an item and set it's location to `On Order`. ORD is non-magical. - The item arrives, I check it in, `ORD: PROC` "moves" it to cataloguing. Cataloguing wants to change the permanent location. - After cataloguing it should go to the new items shelf. Check in, `PROC: NEW`. Everything fine in the OPAC display. - After a week or so on the new items shelf, check in, `NEW: _PERM_` moves it back to `on order`. To work around my trouble with the location, I played with a similar juggling for `UpdateNotForLoanStatusOnCheckin`. (Sidenote: it seems that I am required to use numbers for the values to juggle there, e.g. `-1: -3`, while the editor allows for text. If this is a bug I'd add one to bz.) This propagates as expected and from a display perspective it would also be ok. Unfortunately, the strict `not for loan` doesn't work well for us. We are open 24/7, but not staffed 24/7. IOW whatever hits the shelf can be taken. If someone checks out an item that is in principle not for loan, I'd really like to check it out, just to know who has it ;) I did not yet find a way to soften `not for loan` to something like `2 days and immediately send a recall letter`. (Current procedure.) Additionally, we check in _all items_ from the CART all the time as we have a lot of patrons that just drop them into the box and they need to be returned to get the RFID into the proper state. (So in our case the cron wouldn't help.) BTW: what proved pretty flexible in our current system are what I called back then "special patrons". If I check out an item to those the item is not actually checked out, but they manipulate some Marc fields. We used them a lot to set the temporary locations to values like `repair`, `cataloguing`, `on display` or `library desk` (for items ready for the patron to fetch; Koha does this differently). Unlike checking in, where I have to rely on automatic propagation, checking out allows to select what I want to do by means of the cardnumber I get as a second parameter on the SIP-terminal. For configuration I used something like 788 _7 |2 P:(DE-HGF) |a {"j": "available", "l": "Cataloguing"} |i 8767_ which would set `876 7_ |javailable |lCataloguing`, ie the item is available, but in cataloguing. (Our patrons are currently just authority records, so I have full Marc at my disposal.) -- Kind regards, Alexander Wagner Deutsches Elektronen-Synchrotron DESY Library and Documentation Building 01d Room OG1.444 Notkestr. 85 22607 Hamburg phone: +49-40-8998-1758 e-mail: alexander.wagner(a)desy.de

4 8

REMINDER: Development IRC meeting 20 March 2024
by Fischer, Katrin 19 Mar '24

19 Mar '24

Hi all, just a small reminder about our meeting tomorrow: https://wiki.koha-community.org/wiki/Development_IRC_meeting_20_March_2024 Time converter: https://www.timeanddate.com/worldclock/fixedtime.html?msg=Koha+Developers+IR C+Meeting <https://www.timeanddate.com/worldclock/fixedtime.html?msg=Koha+Developers+I RC+Meeting&iso=20240320T1200> &iso=20240320T1200 Please add to the agenda if you have any topics you'd like to discuss. We'll also look at roadmap projects and their current status. If you are the lead or a supporter for a roadmap project, it would be nice to hear from you! See you there! Katrin

1 0

Re: [Koha-devel] [Koha] Thesis report
by Bruns, Anke 18 Mar '24

18 Mar '24

Hi, the SQL for the report depends on where, i.e. in which MARC fields, the information is stored in your Koha. You'll find lots of examples for SQL reports in the SQL Report Library and can choose one that fits well and then adjust the SQL to your needs. The link to the Reports Library can be found in your reports menu (I'm not currently at my desk so cannot quickly look it up for you). If you're not familiar with SQL you'll perhaps need someone with more experience, and it might take a bit of trial and error before you get the desired results. Of course you can ask more specific questions in the list, those are usually easier to answer than very general ones. Best regards, Anke Am 17.03.2024 08:01 schrieb Ruqaiya Said Alfarsi <ruqaiya.alfarsi(a)unizwa.edu.om>: Dear All, Could someone find to me a specific report for thesis list by following points: (1) For master’s theses related to the University of Nizwa before 2024 (2) Another file for the year 2024 (3) A PDF file is available for master’s theses (4) A file that does not have a pdf file I will be thankful for your help. Best regards -- -- <https://www.unizwa.edu.om/> <https://ishraqa.unizwa.edu.om/> <https://alkhalil.unizwa.edu.om/> <https://instagram.com/unizwaoman?utm_medium=copy_link> <https://www.facebook.com/unizwaoman/> <https://twitter.com/unizwaoman> _______________________________________________ Koha mailing list http://koha-community.org Koha(a)lists.katipo.co.nz Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

1 0

Reserve the date! There will be a GBSD on 2024-03-22!
by Magnus Enger 15 Mar '24

15 Mar '24

Kia ora! The poll has spoken, and there will be a GBSD on 2024-03-22, in the timezone of your choice. More information: https://wiki.koha-community.org/wiki/2024-03-22_Global_bug_squashing_day Mark the date in your calendar and come join the fun! How far can we get the numbers on https://dashboard.koha-community.org/ to change, and how far up the lists can you get your own name? Best regards, Magnus Libriotech/imCode

1 0