[koha-commits] main Koha release repository branch master updated. v17.05.00-28-geddf975
Git repo owner
gitmaster at git.koha-community.org
Mon Jun 5 18:00:37 CEST 2017
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".
The branch, master has been updated
via eddf975cf0244c731f987c64af5126090f73f9f2 (commit)
via 5f6e1e00c265a552cf6faa7b7fa30db725204eb6 (commit)
via 6e40ced5c27fa704b48ff4e1a226bb2693192545 (commit)
via e3519f15382351d04827b1d64e413f4ffbae0637 (commit)
via 273659cc031b9be0c79fe199f4ec76c7bb44ac26 (commit)
via 7e111f1b3f1056e1cf75c5805dd2f85958ef9484 (commit)
via 9ca8275862e5730595fdd99d90295c90ba708e15 (commit)
via 23e0db00784a3de3642e87dbff3d858cb92b5a74 (commit)
via 7457f278af685eb3f71eed57db2ff333c1c32814 (commit)
via 3c83e117869e501275fffc88ac10c9e1aee92160 (commit)
from fbade9e587b349449a50e6d6ba78309533268e51 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit eddf975cf0244c731f987c64af5126090f73f9f2
Author: Marc Véron <veron at veron.ch>
Date: Tue May 23 07:08:41 2017 +0200
Bug 18653: Possible privacy breach with OPAC password recovery
OPAC password recovery allows to find out which email address belongs to an account. An attacker could systematically guess login names. If they hit an existing one, OPAC displays a message like:
An email has been sent to "xxx at yyy.zz".
Having a combination of login name and email, attackers could use the information e.g. for phishing or other personalized actions.
To reproduce:
- Enable OPAC password recovery (syspref OpacResetPassword)
- 'Guess' a login name e.g. by using a common pattern like ptester for Peter Tester
- If such account exists, you get to know the related email address
This patch removes the email address from the success message. Additionaly, it changes
wording to address Bug 18570 ('will be sent' instead of 'has been sent')
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Simplified the wording. "Will be sent shortly" is used elsewhere too.
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 5f6e1e00c265a552cf6faa7b7fa30db725204eb6
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Mon Jun 5 12:55:36 2017 -0300
Bug 8612: Update installer files for late_issues
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 6e40ced5c27fa704b48ff4e1a226bb2693192545
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Mon Jun 5 12:27:12 2017 -0300
Bug 8612: DBRev 17.06.00.001
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit e3519f15382351d04827b1d64e413f4ffbae0637
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Mon Jun 5 12:35:10 2017 -0300
Bug 8612: Remove warnings from tests
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 273659cc031b9be0c79fe199f4ec76c7bb44ac26
Author: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Date: Fri Jun 2 08:08:57 2017 +0200
Bug 8612: [QA Follow-up] Remove two newlines from template output
When using the Default profile from the basket form, the resulting csv
file has an additional newline after the headers and at the end.
This patch removes them.
Unit test adjusted accordingly.
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 7e111f1b3f1056e1cf75c5805dd2f85958ef9484
Author: Josef Moravec <josef.moravec at gmail.com>
Date: Mon Mar 20 09:05:13 2017 +0000
Bug 8612: [Follow-up] Fix unit test GetBasketAsCSV.t
Test plan:
Run t/db_dependent/Acquisition/GetBasketAsCSV.t
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 9ca8275862e5730595fdd99d90295c90ba708e15
Author: Josef Moravec <josef.moravec at gmail.com>
Date: Thu May 4 07:43:27 2017 +0000
Bug 8612: [Follow-up] Fix regular expression
Fix regular expression to do what is described in the comment
Make header in CSV profile definition optional
Strip white chars from csv profile definition
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 23e0db00784a3de3642e87dbff3d858cb92b5a74
Author: Josef Moravec <josef.moravec at gmail.com>
Date: Mon Mar 20 11:13:47 2017 +0000
Bug 8612: [Followup] Update DBIx schema
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 7457f278af685eb3f71eed57db2ff333c1c32814
Author: Josef Moravec <josef.moravec at gmail.com>
Date: Mon Mar 20 11:12:54 2017 +0000
Bug 8612: [Follow-up] Make usage and type different columns in table
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
commit 3c83e117869e501275fffc88ac10c9e1aee92160
Author: Blou <philippe.blouin at inlibro.com>
Date: Thu Mar 26 16:07:44 2015 -0400
Bug 8612: Use CSV profile for exporting basket
This patch allows the user to use a CSV export profile to create the fields to export the basket as CSV in a basket page.
Test plan:
1) Apply the patch
2) Go to Tools › CSV export profiles and create a profile of type "SQL for basket export in acquisition"
example:
biblionumber=biblio.biblionumber|auteur=biblio.author|titre=biblio.title|date=biblioitems.copyrightdate|editeur=biblioitems.publishercode|isbn=biblioitems.isbn|quantite=aqorders.quantity|prix=aqorders.rrp|panier=aqorders.basketno
3) In acquisition module, create a new basket and add an order to the basket
4) On basket detail page, there should be the split button labelled "Export to CSV"
5) Try to use the button and export CSV with your CSV profile you defined in step 2
6) Validate the CSV file.
7) Repeat 4-6 with a closed basket.
a) close the basket
b) View the basket
c) validate that there is an export button
d) test it with an export
8) prove t/db_dependent/Acquisition/GetBasketAsCSV.t t/db_dependent/Koha/CsvProfiles.t
Initial work:
Sponsored by: CCSR
Signed-off-by: Josef Moravec <josef.moravec at gmail.com>
Signed-off-by: mehdi <mehdi.hamidi at inlibro.com>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
-----------------------------------------------------------------------
Summary of changes:
C4/Acquisition.pm | 124 ++++++++++++++------
Koha.pm | 2 +-
Koha/Schema/Result/ExportFormat.pm | 18 ++-
acqui/basket.pl | 9 +-
basket/basket.pl | 2 +-
basket/downloadcart.pl | 2 +-
.../data/mysql/de-DE/optional/csv_profiles.sql | 4 +-
installer/data/mysql/en/optional/csv_profiles.sql | 4 +-
.../data/mysql/fr-CA/facultatif/csv_profiles.sql | 4 +-
.../data/mysql/it-IT/necessari/csv_profiles.sql | 4 +-
installer/data/mysql/kohastructure.sql | 1 +
installer/data/mysql/updatedatabase.pl | 13 ++
.../intranet-tmpl/prog/en/modules/acqui/basket.tt | 39 +++++-
.../prog/en/modules/acqui/csv/basket.tt | 5 +-
.../prog/en/modules/tools/csv-profiles.tt | 71 ++++++++---
.../bootstrap/en/modules/opac-password-recovery.tt | 2 +-
opac/opac-downloadcart.pl | 2 +-
opac/opac-downloadshelf.pl | 2 +-
serials/claims.pl | 2 +-
t/db_dependent/Acquisition/GetBasketAsCSV.t | 83 +++++++++++++
t/db_dependent/Koha/CsvProfiles.t | 5 +-
tools/csv-profiles.pl | 6 +
tools/export.pl | 2 +-
virtualshelves/downloadshelf.pl | 2 +-
virtualshelves/shelves.pl | 2 +-
25 files changed, 331 insertions(+), 79 deletions(-)
create mode 100644 t/db_dependent/Acquisition/GetBasketAsCSV.t
hooks/post-receive
--
main Koha release repository
More information about the koha-commits
mailing list