- Koha-devel - lists.koha-community.org

REST API should not advertise required permissions
by David Cook 04 Jan '23

04 Jan '23

Hi all, I just noticed the following error while testing the REST API: {"error":"Authorization failure. Missing required permission(s).","required_permissions":{"borrowers":"1"}} It seems to me that we should just stop at "Authorization failure". While it might be helpful for a dev to know what the required permissions are, I think it would also be overly helpful for an attacker to know what permissions are required too, no? I suppose Koha is open source, so it wouldn't be hard for them to look them up anyway, but it just seems odd? David Cook Senior Software Engineer Prosentient Systems Suite 7.03 6a Glen St Milsons Point NSW 2061 Australia Office: 02 9212 0899 Online: 02 8005 0595

3 2

Roadmap for v23.05
by Tomas Cohen Arazi 03 Jan '23

03 Jan '23

Hi all, last cycle we worked through a roadmap which was not 100% finished, but we made good progress in many of the main milestones: - Task queue streamlining (several improvements, progress bars, etc) - ERM (done) - Introduction of Vue (done) - Dates handling (partially done) - Circ, holds, biblios and items refactoring (partially done) - New staff interface (done) - API refinements (partially done) - Wiki migration (done) Now, it is time for us to build a new one ofr this cycle. Please fill with the things you plan to work on this cycle, and put your name so we all know and can help each other. https://annuel.framapad.org/p/Roadmap_for_Koha_v23.05 Thanks in advance! -- Tomás Cohen Arazi Theke Solutions (http://theke.io) ✆ +54 9351 3513384 GPG: B2F3C15F

2 1

Hackfest in Marseille
by Paul Poulain 02 Jan '23

02 Jan '23

<TL:DR>The hackfest will take place in March, 27th - 31th, drop me an email if you want to join Hello ladies and gentlemen, After 3 years of pandemic where everything was messy, the hackfest in Marseille is back ! Join us for coding/testing/translating/documenting/dreaming about the future of your preferred ILS, in Marseille, 108 rue Breteuil, 13006 Marseille. We'll start on monday, March, 27th, and end on Friday, March, 31th. * *How to register ?* Just drop me an email ! * *How much does it cost ?* Nothing. We just ask some fees for the lunch [special information: cheese lunch on Tuesday] * *What is the agenda ?* there's none, come with your ideas, your wish, your goodwill, and we'll do a lot of things in smaller or larger groups. * *5 days, wow, that's a lot !* yes, but as it's an "un-conference", you can come just for a part of the week. I suggest not less than 3 days, but no obligation here. * *I'm not a developer !* That's not a problem. MANY librarians come to the hackfest, they meet other librarians, they talk about Koha, they help testing, documenting, translating... There's always a lot of things to do Also note: it will be the very last hackfest in our current office, we'll move to another office in May (but don't worry, I plan to continue hackfesting in your new office) -- Paul Poulain, Associé-gérant / co-owner BibLibre, Services en logiciels libres pour les bibliothèques BibLibre, Open Source software and services for libraries

1 0

How best to support MARC21 880?
by David Cook 01 Jan '23

01 Jan '23

Hi all, The MARC21 880 field allows you to provide alternative graphical representations for pretty much any other MARC field. Typically, in Koha (and perhaps other library systems), we display these alternative graphical representations on the "detail page". You can see the roman script, the Arabic script, the Chinese script, etc. In Koha, we also show some data in the search results, and that's more problematic. because the search results should take up a limited amount of space on the screen, but hypothetically you can include many different scripts via the 880. I used to work in a government library in Canada where many of our bibliographic records contained quite a few different 880s. So it does happen. I have a library that has catalogued records using the roman alphabet (ie using Pinyin) and provided Chinese versions via the 880. They'd like to show both the romanized and Chinese versions throughout Koha (e.g. in the cart, checkout screens, course reserves, etc.) I've coded some of those customizations, since they only have 880s in Chinese, but I'm increasingly reluctant to make these changes. I don't want to carry these customizations locally, but I don't know that the Koha community would accept these changes. What do you all think about this? Should we include every 880 title and author in every screen? Should we maybe include them but hide them by default using CSS and then allow certain libraries to just show particular languages used by their patrons or by checking the current language? I know I can go faster on my own, but I rather go farther with all of you, so please let me know your thoughts : ) David Cook Senior Software Engineer Prosentient Systems Suite 7.03 6a Glen St Milsons Point NSW 2061 Australia Office: 02 9212 0899 Online: 02 8005 0595

2 1

Koha Community Newsletter: December 2022
by Koha Newsletter 29 Dec '22

29 Dec '22

The Koha Community Newsletter for December 2022 is here: https://koha-community.org/koha-community-newsletter-december-2022/ Many thanks to everyone who submitted articles and news to this newsletter! Please feel free to email me with any corrections or suggestions. -- Michael Kuhn Editor, Koha Community Newsletter

1 0

KTD - stable branches
by Tomas Cohen Arazi 23 Dec '22

23 Dec '22

Hi all, I made some pushes to the stable branches (22.11, 22.05 and 21.11) so the images are (internally) aligned with (master's) `ktd` command. Please let me know if you encounter any issues. Merry xmas everyone! -- Tomás Cohen Arazi Theke Solutions (http://theke.io) ✆ +54 9351 3513384 GPG: B2F3C15F

1 0

The many failings of background_jobs_worker.pl
by Philippe Blouin 22 Dec '22

22 Dec '22

Howdy! Since moving a lot of our users to 22.05.06, we've installed the worker everywhere. But the number of issues encountered is staggering. The first one was Can't call method "process" on an undefined value where the id received from MQ was not found in the DB, and the process is going straight to process_job and failing. Absolutely no idea how that occurs, seems completely counterintuitive (the ID comes from the DB after all), but here it is. Hacked the code to add a "sleep 1" to fix most of that one. Then came the fact that stored events were not checked if the connection to MQ was successful at startup. Bug 30654 refers it. Hacked a little "$init" in there to clear that up at startup. Then came the malformed UTF-8 character in JSON string, at character offset 296 (before "\x{e9}serv\x{e9} au ...") at decode_json that crashes the whole process. And for some reason, it never gets over it, gets the same problem at every restart, like the event is never "eaten" from the queue. Hacked an eval then a try-catch over it... After coding a monitor to alert when a background_jobs has been "new" over 5 minutes in the DB, I was inundated by messages. There's alway one elasticsearch_update that escapes among the flurry, and they slowly add up. At this point, the only viable solution is to run the workers but disable RabbitMQ everywhere. Are we really the only ones experiencing that? Regards, PS Our servers are well-above-average Debian 11 machines with lot of firepower (ram, cpu, i/o...). -- Philippe Blouin, Directeur de la technologie Tél. : (833) 465-4276, poste 230 philippe.blouin(a)inLibro.com inLibro | pour esprit libre | www.inLibro.com <http://www.inLibro.com>

6 12

Added Testing SSO guide to wiki
by David Cook 20 Dec '22

20 Dec '22

Hi all, At Martin's request at https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31651#c3 I've put together a wiki page for testing single sign on (SSO) using Keycloak in koha-testing-docker: https://wiki.koha-community.org/wiki/Testing_SSO#SAML It's a first draft, so it might not be perfect, but I was able to use Keycloak to log into Koha using OpenID Connect and SAML while writing the guides, so it should work. Note that the instructions are just for testing. They're not production instructions. The intention is just to provide this for Koha developers, so that everyone can easily work on Koha SSO patches without being a SSO expert or without having commercial 3rd party SSO services available. I hope people find it useful! Let me know if you have any feedback on how it can improved. (Note: I already know the formatting is awful, but I was in a hurry and I'm not familiar enough with Mediawiki to format it better. Maybe someone can give a hand there?) David Cook Senior Software Engineer Prosentient Systems Suite 7.03 6a Glen St Milsons Point NSW 2061 Australia Office: 02 9212 0899 Online: 02 8005 0595

1 0

HOLDPLACED should be emailed to item branch rather than patron branch
by David Cook 19 Dec '22

19 Dec '22

Hi all, I had some librarians raise to me that the HOLDPLACED email goes to the patron branch rather than the item branch. I've raised https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32499 to address this, but can anyone think of a reason why it should stay the patron branch and not the item branch? David Cook Senior Software Engineer Prosentient Systems Suite 7.03 6a Glen St Milsons Point NSW 2061 Australia Office: 02 9212 0899 Online: 02 8005 0595

1 0

ktd - enhancements
by Tomas Cohen Arazi 19 Dec '22

19 Dec '22

Hi all, just wanted to let you know that we solved a long standing issue in KTD [1] that made it awkward to switch from using ES or not with KTD (required tweaking the .env file and would break if things didn't match). The `ktd` command now takes advantage of this enhancement so, as a reminder, if you want to run KTD with ES 7 [2] you just need to run: $ ktd --es7 up Any questions about it, just ask on IRC or on this thread. Best regards [1] https://gitlab.com/koha-community/koha-testing-docker/-/issues/306 [2] ktd --help will show you all the available options -- Tomás Cohen Arazi Theke Solutions (http://theke.io) ✆ +54 9351 3513384 GPG: B2F3C15F

1 0