[Koha-bugs] [Bug 13917] OPAC: Putting holds still possible by URL even if turned off by system preference

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13917

--- Comment #1 from Marc Véron <veron at veron.ch> ---
Created attachment 37274
  -->
http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=37274&action=edit
OPAC: Putting holds still possible by URL even if turned off by system
preference

To test:

1)
Prepare an URL that put's a hold in OPAC (see comment #1), e.g.
[YOUR SERVER]/cgi-bin/koha/opac-reserve.pl?biblionumbers=1

2)
Set system preference 'RequestOnOpac' to 'Don't allow patrons to place holds on
items from the OPAC.'

3)
Go diectly to this URL.
Result: The page displays to confirm hold (wrong)

4)
Apply patch

5)
Repeat step 3
Result: Redirect to 404 page (OK)

6)
Set system preference to "Allow"

7)
Repeat step 3
Result: The page displays to confirm hold (OK), like it would be from link in
OPAC.

-- 
You are receiving this mail because:
You are watching all bug changes.