[Koha-bugs] [Bug 2811] New: OpacRenewalAllowed not checked everywhere

[bugzilla-daemon at pippin.metavore.com]

http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=2811

           Summary: OpacRenewalAllowed not checked everywhere
           Product: Koha
           Version: unspecified
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Circulation
        AssignedTo: nahuel.angelinetti at biblibre.com
        ReportedBy: nahuel.angelinetti at biblibre.com
         QAContact: koha-bugs at lists.koha.org


There are some "security" failure about this syspref.
1) in opac-user.pl, if there is an overdue and opacrenewalallowed="off" the
renew button is showed, and it works.
2) in opac-renew.pl, it's only checked as "CanBookBeRenewed()", but do not
check if opacrenewalallowed is to on, so if a user enter manually the url, he
can renew the document.




------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.