Bug 16273

Summary: Prevent selfregistration from printing the borrower password and filling the logging form
Product: Koha Reporter: Nicolas Legrand <nicolas.legrand>
Component: PatronsAssignee: Jonathan Druart <jonathan.druart>
Status: CLOSED FIXED QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: gmcharlt, jonathan.druart, katrin.fischer, kyle.m.hall, kyle
Version: master   
Hardware: All   
OS: All   
Change sponsored?: Sponsored Patch complexity: Medium patch
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Attachments: Bug 16273: Add the new pref PatronSelfRegistrationPrefillForm
Bug 16273: Add the ability not to display the login details for newly registered patrons
Bug 16273: Add the new pref PatronSelfRegistrationPrefillForm
Bug 16273: Add the new pref PatronSelfRegistrationPrefillForm
Bug 16273: Add the ability not to display the login details for newly registered patrons
[PASSED QA] Bug 16273: Add the new pref PatronSelfRegistrationPrefillForm
[PASSED QA] Bug 16273: Add the ability not to display the login details for newly registered patrons

Description Nicolas Legrand 2016-04-15 13:00:52 UTC
At the BULAC Library, we use selfregistration on dedicated computer and we would like to prevent the validation display from printing the patron password and from filling the logging form. Some other person queuing for selfregistration may see the password or log the the other patron account if the later doesn't close the page.

A new syspref should be set to keep the old behaviour or choose this new one.
Comment 1 Jonathan Druart 2016-04-25 08:57:28 UTC Comment hidden (obsolete)
Comment 2 Jonathan Druart 2016-04-25 08:57:31 UTC Comment hidden (obsolete)
Comment 3 Nicolas Legrand 2016-05-03 15:23:02 UTC Comment hidden (obsolete)
Comment 4 Nicolas Legrand 2016-05-03 15:23:54 UTC
Created attachment 51157 [details] [review]
Bug 16273: Add the new pref PatronSelfRegistrationPrefillForm

Sponsored-by: BULAC - http://www.bulac.fr/
Signed-off-by: Nicolas Legrand <nicolas.legrand@bulac.fr>
Comment 5 Nicolas Legrand 2016-05-03 15:24:04 UTC
Created attachment 51158 [details] [review]
Bug 16273: Add the ability not to display the login details for newly registered patrons

When a new patron registers, the confirmation page is displayed with
login details (login, password, cardnumber) and the login form is
prefilled.
In the case of public computer, for security reasons that should not
appear, patrons might forget to close the window.

Test plan:
1/ Set PatronSelfRegistrationPrefillForm on
2/ Register a new patron
=> The login details should not be displayed and the login form should
not be prefilled.

Sponsored-by: BULAC - http://www.bulac.fr/
Signed-off-by: Nicolas Legrand <nicolas.legrand@bulac.fr>
Comment 6 Katrin Fischer 2016-08-02 05:33:12 UTC
How is the user informed about his/her login credentials when this preference is turned on?
Comment 7 Jonathan Druart 2016-08-02 07:56:52 UTC
(In reply to Katrin Fischer from comment #6)
> How is the user informed about his/her login credentials when this
> preference is turned on?

Since bug 15343, you can choose your password :)
Comment 8 Katrin Fischer 2016-09-18 20:51:34 UTC
Created attachment 55663 [details] [review]
[PASSED QA] Bug 16273: Add the new pref PatronSelfRegistrationPrefillForm

Sponsored-by: BULAC - http://www.bulac.fr/
Signed-off-by: Nicolas Legrand <nicolas.legrand@bulac.fr>

Signed-off-by: Katrin Fischer  <katrin.fischer@bsz-bw.de>
Comment 9 Katrin Fischer 2016-09-18 20:52:11 UTC
Created attachment 55664 [details] [review]
[PASSED QA] Bug 16273: Add the ability not to display the login details for newly registered patrons

When a new patron registers, the confirmation page is displayed with
login details (login, password, cardnumber) and the login form is
prefilled.
In the case of public computer, for security reasons that should not
appear, patrons might forget to close the window.

Test plan:
1/ Set PatronSelfRegistrationPrefillForm on
2/ Register a new patron
=> The login details should not be displayed and the login form should
not be prefilled.

Sponsored-by: BULAC - http://www.bulac.fr/
Signed-off-by: Nicolas Legrand <nicolas.legrand@bulac.fr>

Signed-off-by: Katrin Fischer  <katrin.fischer@bsz-bw.de>
Comment 10 Kyle M Hall 2016-09-27 13:17:49 UTC
Pushed to master for 16.11, thanks Jonathan!