[Koha-bugs] [Bug 20333] Show certain links just for registered users

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20333

Tomás Cohen Arazi <tomascohen at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |tomascohen at gmail.com

--- Comment #2 from Tomás Cohen Arazi <tomascohen at gmail.com> ---
(In reply to Katrin Fischer from comment #1)
> Hi Hugo,
> 
> I think just controlling the visibility is not a good way of protecting
> restricted resources. Links can be shared or keep working, if your account
> has been blocked or deleted. What you need to implement, I think, is a
> protection of the resource itself, that Koha can't provide unless it's
> stored within Koha itself.

We could add that functionality to Koha uploads.

Some sites work with the referer as a way to validate the request, so hiding
the links could help. But that'd be certainly a separate featurre: optionally
removing 856 fields based on some regexp and config.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.