[Koha-bugs] [Bug 21087] New: Patron's password is hashed twice when the object is saved

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Thu Jul 19 00:22:26 CEST 2018


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21087

            Bug ID: 21087
           Summary: Patron's password is hashed twice when the object is
                    saved
 Change sponsored?: ---
           Product: Koha
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: critical
          Priority: P5 - low
         Component: Architecture, internals, and plumbing
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: jonathan.druart at bugs.koha-community.org
        QA Contact: testopia at bugs.koha-community.org
        Depends on: 20287

When a patron is edited (reading the code at least using patron batch
modification), the password is lost.

Prior to bug 20287 ModMember took the $hash of modification, and '****' was a
trick to not update the password (when coming from memberentry).

The same trick has been reused for the move of ModMember to
Koha::Patron->store, but then the following code will modify the password of
the patron:

  my $password = 'password';
  $patron->password($password)->store;                          
  $patron->surname('xxx')->store;                               

=> User is not longer able to login with 'password'


Referenced Bugs:

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20287
[Bug 20287] Move AddMember and ModMember to Koha::Patron
-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.


More information about the Koha-bugs mailing list