[Koha-bugs] [Bug 13917] New: OPAC: Still accessible by URL even if turned off by system preference

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13917

            Bug ID: 13917
           Summary: OPAC: Still accessible by URL even if turned off by
                    system preference
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: minor
          Priority: P5 - low
         Component: OPAC
          Assignee: oleonard at myacpl.org
          Reporter: veron at veron.ch
        QA Contact: testopia at bugs.koha-community.org

To reproduce:

1)
In staff client, set System preference 'RequestOnOpac' to 'Allow patrons to
place holds on items from the OPAC.'
2)
Log in to OPAC with a patron' credentials, search a record, place hold without
confirming, copy URL, something like 
[YOUR SERVER]/cgi-bin/koha/opac-reserve.pl?biblionumbers=1
3)
In staff client, set  System preference 'RequestOnOpac' to 'Don't allow patrons
to place holds on items from the OPAC.'
4)
Log out. Log in again in OPAC.
5)
Paste URL in browser's address bar

Result: Page displays, you can put a hold on the requested item.

Expected: 
404 page, similar to solution for Bug 12703

-- 
You are receiving this mail because:
You are watching all bug changes.