Bug 8540 - Several staff client scripts which do not require authentication
Summary: Several staff client scripts which do not require authentication
Status: CLOSED FIXED
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal (vote)
Assignee: Galen Charlton
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-07-31 16:21 UTC by Owen Leonard
Modified: 2015-06-04 23:23 UTC (History)
3 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Owen Leonard 2012-07-31 16:21:05 UTC
I've found several scripts with "authnotrequired => 1"

acqui/newordersuggestion.pl
acqui/z3950_search.pl
catalogue/cardview.pl
cataloguing/z3950_search.pl
reports/stats.screen.pl
serials/serial-issues.pl
services/itemrecorddisplay.pl
Comment 1 Martin Renvoize 2013-02-18 14:26:34 UTC
Do we know what it breaks if we set this to '0'?
Comment 2 Katrin Fischer 2013-02-18 17:14:50 UTC
ouch.
Probably what is needed is picking the correct permissions for those pages?
Comment 3 Katrin Fischer 2014-07-12 12:12:02 UTC
bug 11715 fixed at least some of those.