[Koha-bugs] [Bug 16694] New: Limit SIP2 auth by patron attribute

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16694

            Bug ID: 16694
           Summary: Limit SIP2 auth by patron attribute
 Change sponsored?: Sponsored
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Authentication
          Assignee: magnus at libriotech.no
          Reporter: magnus at libriotech.no
        QA Contact: testopia at bugs.koha-community.org
                CC: dpavlin at rot13.org

In Scandinavia "more open" (Swedish: "Meröppet", Norwegian: "Meråpent") is a
hot issue at the moment. What this means is that patrons can use their card and
password/PIN to lock themselves into the library even when staff is not around.
Typically, this means that patrons can get access to the library building from
7 am to 11 pm, even if the library is only staffed from 8 am to 5 pm. 

Typically, SIP2 is used to communnicate between the "more open"-system and the
ILS, specifically to authenticate the user with a username and password/PIN. 

Also, you want the ability to turn "more open" access on and off for patrons.
An extended patron attribute with possible values of NULL/empty, 0 or 1 should
serve well for this. 

SIP2 does not have a field for saying "this is a moreopen login", so we need a
way to identify a SIP2 user as a moreopen user. My plan is to add another
attribute to the login element in SIPConfig.xml to achieve this:

<login id="koha"   password="koha"  delimiter="|" error-detect="enabled"
institution="kohalibrary" patron-attribute="MEROPPET" />

"MEROPPET" is then the name of an extended patron attribute which can be set to
NULL or 0 (patron should not have access to moreopen) or 1 (patron should have
access).

This should be flexible enough to allow other, similar schemes to use some
other patron attribute.

-- 
You are receiving this mail because:
You are watching all bug changes.