Koha-clms/opac
Lucas Gass aa8c865edb Bug 36679: Prevent SCO login for the AnonymousPatron
1. Make sure AutoSelfCheckAllowed is Allowed and AutoSelfCheckID and AutoSelfCheckPass are in use.
2. Make sure AnonymousPatron is pointed to an account.
3. Set SelfCheckoutByLogin to cardnumber.
4. Verify that if you go to the anonymous patron account in the staff interface, you cannot checkout items.
5. Go to the selfcheck path of the library.  It should auto login.  Put in the cardnumber for the anonymous user.
6. Proceed to check out items!
7. APPLY PATCH, restart_all
8. Try step 5 again, you should not be able to log in as the AnonymousPatron. Instead you should be redirected to OPAC home page
9. Switch SelfCheckoutByLogin to 'username and pasword'.
10. Again try to log in as the AnonymousPatron, you should not be able to.
11. Make sure you can login as a regular patron when SelfCheckoutByLogin is set to 'cardnumber' and when it is set to 'username and pasword'.

Signed-off-by: David Nind <david@davidnind.com>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit 76075976ea)
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
(cherry picked from commit 58b5228af0)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2024-07-17 15:41:06 +02:00
..
clubs Bug 35941: (QA follow-up) Tidy clubs-tab.pl 2024-02-19 14:41:11 +01:00
errors
…
external/overdrive
…
sci
…
sco Bug 36679: Prevent SCO login for the AnonymousPatron 2024-07-17 15:41:06 +02:00
svc Bug 35942: OPAC user can enroll several times to the same club 2024-02-19 14:41:11 +01:00
ilsdi.pl
…
maintenance.pl Bug 23798: Convert OpacMaintenanceNotice system preference to additional contents 2023-11-08 17:41:27 -03:00
oai.pl
…
opac-ISBDdetail.pl Bug 35961: (follow-up) Pass along the borrowernumber 2024-05-29 15:04:20 +02:00
opac-MARCdetail.pl Bug 35961: (follow-up) Pass along the borrowernumber 2024-05-29 15:04:20 +02:00
opac-account-pay-return.pl
…
opac-account-pay.pl Bug 36088: Remove useless code form opac-account-pay.pl 2024-03-11 10:29:19 +01:00
opac-account.pl
…
opac-addbybiblionumber.pl Bug 30418: Add ability for permitted staff to edit list contents 2023-05-15 18:23:57 -03:00
opac-alert-subscribe.pl Bug 28130: (QA follow-up) Tidy 2023-10-11 10:31:39 -03:00
opac-alert-subscriptions.pl Bug 28130: (QA follow-up) Tidy 2023-10-11 10:31:39 -03:00
opac-article-request-cancel.pl
…
opac-authorities-home.pl Bug 35578: Simplify the code using intersect 2024-02-01 15:50:38 +01:00
opac-authoritiesdetail.pl Bug 21330: Allow XSLT for authority detail view in OPAC 2023-05-15 18:24:03 -03:00
opac-basket.pl Bug 33102: Display fields from biblioitems in OPAC/staff interface cart 2023-05-05 17:45:19 -03:00
opac-blocked.pl Bug 35952: Remove unnecessary line for OpacSuppressionMessage 2024-03-11 10:40:31 +01:00
opac-browse.pl
…
opac-browser.pl
…
opac-changelanguage.pl
…
opac-course-details.pl Bug 32445: (follow-up) Fix availability display on opac-course-details 2023-01-05 09:09:48 -03:00
opac-course-reserves.pl
…
opac-curbside-pickups.pl
…
opac-detail.pl Bug 34886: Adjust other opac detail scripts 2024-04-17 17:10:07 +02:00
opac-discharge.pl
…
opac-dismiss-message.pl Bug 36532: Protect opac-dismiss-message.pl from malicious usages 2024-04-24 07:36:20 +02:00
opac-downloadcart.pl
…
opac-downloadshelf.pl Bug 33069: Fix error in MARC download for OPAC lists 2023-05-09 10:57:55 -03:00
opac-export.pl
…
opac-holdshistory.pl
…
opac-ics.pl
…
opac-idref.pl
…
opac-illrequests.pl Bug 35685: Fix after creation actions 2024-05-23 11:37:58 +02:00
opac-image.pl Bug 33047: Return 404 instead of 500 when biblio does not exist 2023-07-10 15:43:14 -03:00
opac-imageviewer.pl
…
opac-issue-note.pl
…
opac-library.pl
…
opac-main.pl Bug 31383: Create a parent-child DB relation for additional content 2023-10-20 14:43:56 -03:00
opac-memberentry.pl Bug 36816: Remove warning 2024-05-30 10:13:53 +02:00
opac-messaging.pl Bug 31743: Change condition for messaging tab 2022-11-04 20:01:13 -03:00
opac-modrequest-suspend.pl Bug 35492: Open holds tab by default on opac-user.pl after suspending a hold 2024-01-03 15:09:10 +01:00
opac-modrequest.pl Bug 35495: Open holds tab by default on opac-user.pl after cancelling a hold 2024-01-03 15:09:49 +01:00
opac-mymessages.pl
…
opac-news-rss.pl
…
opac-overdrive-search.pl
…
opac-page.pl Bug 36875: Do not pass unsanitized language to $page->translated_content 2024-06-06 10:59:48 +02:00
opac-passwd.pl
…
opac-password-recovery.pl Bug 21431: Add action parameter to set_password 2023-11-09 14:50:11 -03:00
opac-patron-consent.pl Bug 31503: Make opac-patron-consent more generic 2023-10-25 10:35:20 -03:00
opac-patron-image.pl
…
opac-privacy.pl
…
opac-ratings.pl
…
opac-readingrecord.pl Bug 33949: Replace GetAllIssues with Koha::Checkouts - opac 2023-10-18 15:41:26 -03:00
opac-recall.pl Bug 36142: recallsview template param for opac-recall.tt 2024-05-23 13:56:54 +02:00
opac-recalls.pl
…
opac-registration-verify.pl Bug 35445: Require OPAC user to confirm self-registration with button push 2024-02-01 15:54:02 +01:00
opac-renew.pl Bug 33444: Update AddRenewal to take a hashref of params 2023-07-19 12:06:52 -03:00
opac-reportproblem.pl
…
opac-request-article.pl Bug 36072: opac-request-article should check syspref 2024-02-19 14:41:11 +01:00
opac-reserve.pl Bug 35977: (follow-up) Cleaner working approach 2024-05-23 17:28:56 +02:00
opac-reset-password.pl
…
opac-restrictedpage.pl
…
opac-retrieve-file.pl
…
opac-review.pl
…
opac-routing-lists.pl
…
opac-search-history.pl
…
opac-search.pl Bug 35558: Do not retrieve the local image if none exists - OPAC 2024-05-24 10:00:43 +02:00
opac-sendbasket.pl Bug 36520: Sanitize input in opac-sendbasket.pl 2024-06-06 10:59:48 +02:00
opac-sendshelf.pl Bug 34731: Don't call SendQueuedMessages if message_id is bad 2023-09-12 09:44:59 -03:00
opac-serial-issues.pl
…
opac-shareshelf.pl
…
opac-shelves.pl Bug 36858: Remove warnings 2024-05-29 16:12:13 +02:00
opac-showmarc.pl
…
opac-showreviews.pl
…
opac-suggestions.pl Bug 33236: Move NewSuggestion to Koha::Suggestion->store 2023-06-06 10:08:35 -03:00
opac-tags.pl Bug 36785: Typo unreconized and bilbio in tags code 2024-05-29 15:12:56 +02:00
opac-tags_subject.pl
…
opac-topissues.pl
…
opac-user.pl Bug 35496: (QA follow-up): tidy up code 2024-01-03 15:10:21 +01:00
tracklinks.pl
…
unapi
…