Bug 13342 - Not logged in user can place a review/comment as a deleted patron
Summary: Not logged in user can place a review/comment as a deleted patron
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: OPAC (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal (vote)
Assignee: Owen Leonard
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-26 07:09 UTC by Olli-Antti Kivilahti
Modified: 2019-04-26 09:00 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Olli-Antti Kivilahti 2014-11-26 07:09:38 UTC
REPLICATE:
1. Log in to OPAC.
2. Find a Biblio and open the comments-tab.
3. Wait for the session to timeout, or logout from another tab/window.
4. Modify/create a review/comment.
5. Save it.
6. Go to the staff client and moderate "Comments awaiting moderation".
7. Observe the review/comment as being created from "(deleted patron)"
Comment 1 Katrin Fischer 2019-02-07 09:11:31 UTC
This problem caused us some headache as it happened quite often in one of the libraries we support. I just confirmed that the problem still exists in 18.11 and therefore possibly master as well. 

Thx, Olli, for reporting!