From efc5c8404ae15a336f3dc6abd973b497207d6561 Mon Sep 17 00:00:00 2001
From: Fridolin Somers <fridolin.somers@biblibre.com>
Date: Thu, 3 Oct 2019 15:43:56 +0200
Subject: [PATCH] Bug 21301: Remove patron informations in reserves for
 GetRecords ILS-DI service

Actually, the GetRecords service gives many information :
borrowernumber (reserves field)

The issue data should not be sent by these service, its a privacy problem.

Test plan :
1) Enable ILS-DI webservice
2) Place hold on an item
3) Go to {opac}/cgi-bin/koha/ilsdi.pl?service=GetRecords&id={biblionumber}
4) Check the reserves tag content
---
 C4/ILSDI/Services.pm | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/C4/ILSDI/Services.pm b/C4/ILSDI/Services.pm
index 24d50b2d3b..0b811a8ebf 100644
--- a/C4/ILSDI/Services.pm
+++ b/C4/ILSDI/Services.pm
@@ -228,7 +228,6 @@ sub GetRecords {
 
         # Get most of the needed data
         my $biblioitemnumber = $biblioitem->{'biblioitemnumber'};
-        my $holds  = $biblio->current_holds->unblessed;
         my $checkouts = Koha::Checkouts->search(
             { biblionumber => $biblionumber },
             {
@@ -266,6 +265,12 @@ sub GetRecords {
             push @{ $biblioitem->{items}->{item} }, \%item;
         }
 
+        # Holds
+        my $holds = $biblio->current_holds->unblessed;
+        foreach my $hold (@$holds) {
+            delete $hold->{'borrowernumber'};
+        }
+
         # Hashref building...
         $biblioitem->{'reserves'}->{'reserve'} = $holds;
         $biblioitem->{'issues'}->{'issue'}     = $checkouts;
-- 
2.17.1