From efc5c8404ae15a336f3dc6abd973b497207d6561 Mon Sep 17 00:00:00 2001 From: Fridolin Somers Date: Thu, 3 Oct 2019 15:43:56 +0200 Subject: [PATCH] Bug 21301: Remove patron informations in reserves for GetRecords ILS-DI service Actually, the GetRecords service gives many information : borrowernumber (reserves field) The issue data should not be sent by these service, its a privacy problem. Test plan : 1) Enable ILS-DI webservice 2) Place hold on an item 3) Go to {opac}/cgi-bin/koha/ilsdi.pl?service=GetRecords&id={biblionumber} 4) Check the reserves tag content --- C4/ILSDI/Services.pm | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/C4/ILSDI/Services.pm b/C4/ILSDI/Services.pm index 24d50b2d3b..0b811a8ebf 100644 --- a/C4/ILSDI/Services.pm +++ b/C4/ILSDI/Services.pm @@ -228,7 +228,6 @@ sub GetRecords { # Get most of the needed data my $biblioitemnumber = $biblioitem->{'biblioitemnumber'}; - my $holds = $biblio->current_holds->unblessed; my $checkouts = Koha::Checkouts->search( { biblionumber => $biblionumber }, { @@ -266,6 +265,12 @@ sub GetRecords { push @{ $biblioitem->{items}->{item} }, \%item; } + # Holds + my $holds = $biblio->current_holds->unblessed; + foreach my $hold (@$holds) { + delete $hold->{'borrowernumber'}; + } + # Hashref building... $biblioitem->{'reserves'}->{'reserve'} = $holds; $biblioitem->{'issues'}->{'issue'} = $checkouts; -- 2.17.1