Bug 4193 - Authentication with cardnumber/password at intranet allows superlibrarian access
Summary: Authentication with cardnumber/password at intranet allows superlibrarian access
Status: CLOSED FIXED
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: rel_3_0
Hardware: PC All
: PATCH-Sent (DO NOT USE) critical (vote)
Assignee: Henri-Damien LAURENT
QA Contact: Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-02-16 10:45 UTC by Henri-Damien LAURENT
Modified: 2019-06-27 09:24 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments
patch proposed (1.71 KB, patch)
2010-02-16 10:45 UTC, Chris Cormack
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Cormack 2010-05-21 01:24:14 UTC


---- Reported by henridamien@koha-fr.org 2010-02-16 10:45:30 ----

Created an attachment
patch proposed

When an unpriviledged user is login in at intranet with his cardnumber/password, he gains superlibrarian access.



---- Additional Comments From henridamien@koha-fr.org 2010-02-16 10:46:44 ----

Note that the patch is on 3.0.x



--- Bug imported by chris@bigballofwax.co.nz 2010-05-21 01:24 UTC  ---

This bug was previously known as _bug_ 4193 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4193
Imported an attachment (id=1898)

Unknown Component Authentication
   Using default product and component set in Parameters 
Actual time not defined. Setting to 0.0
Setting qa contact to the default for this product.
   This bug either had no qa contact or an invalid one.
The original submitter of attachment 1898 [details] [review] is unknown.
   Reassigning to the person who moved it here: chris@bigballofwax.co.nz.