Summary: | PatronSelfRegistrationEmailMustBeUnique does not prevent duplicates when using PatronSelfRegistrationVerifyByEmail | ||
---|---|---|---|
Product: | Koha | Reporter: | BASE Library Consortium <baselibrary.consortium> |
Component: | OPAC | Assignee: | Jonathan Druart <jonathan.druart> |
Status: | CLOSED FIXED | QA Contact: | Marcel de Rooy <m.de.rooy> |
Severity: | normal | ||
Priority: | P5 - low | CC: | baselibrary.consortium, charles.farmer, jonathan.druart, m.de.rooy, martin.renvoize |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | Small patch |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: | |||
Attachments: |
Bug 19579: Do not confirm the registration if email already used - PatronSelfRegistrationEmailMustBeUnique
Bug 19579: Do not confirm the registration if email already used - PatronSelfRegistrationEmailMustBeUnique Bug 19579: Do not confirm the registration if email already used - PatronSelfRegistrationEmailMustBeUnique |
Description
BASE Library Consortium
2017-11-03 21:54:53 UTC
Created attachment 70136 [details] [review] Bug 19579: Do not confirm the registration if email already used - PatronSelfRegistrationEmailMustBeUnique If PatronSelfRegistrationVerifyByEmail and PatronSelfRegistrationEmailMustBeUnique are set, it should not be possible to register twice with the same email. However the test is made on already created patron cards when the registration is done. Which means it is possible to register several times with the same email address and click on the registration link to finalise the registration. This patch adds a test when the registration link is clicked and display the "Registration invalid" generic message if the same email is used Test plan: 1. Patron submits self registration form using the same email address 3 times 2. Patron receives 3 verification emails 3. Patron clicks on 3 verify token URLs => Only the first registration should succeed, the 2 others must fail Maybe we should display a more specific message? Unless I'm misconfiguring something, I'm not able to send myself more than 1 registration message at a time, with or without the patch. (In reply to Charles Farmer from comment #2) > Unless I'm misconfiguring something, I'm not able to send myself more than 1 > registration message at a time, with or without the patch. Do not click on the link you received before registering the second time. Created attachment 75226 [details] [review] Bug 19579: Do not confirm the registration if email already used - PatronSelfRegistrationEmailMustBeUnique If PatronSelfRegistrationVerifyByEmail and PatronSelfRegistrationEmailMustBeUnique are set, it should not be possible to register twice with the same email. However the test is made on already created patron cards when the registration is done. Which means it is possible to register several times with the same email address and click on the registration link to finalise the registration. This patch adds a test when the registration link is clicked and display the "Registration invalid" generic message if the same email is used Test plan: 1. Patron submits self registration form using the same email address 3 times 2. Patron receives 3 verification emails 3. Patron clicks on 3 verify token URLs => Only the first registration should succeed, the 2 others must fail Maybe we should display a more specific message? Signed-off-by: Owen Leonard <oleonard@myacpl.org> QA: Looking here Created attachment 75256 [details] [review] Bug 19579: Do not confirm the registration if email already used - PatronSelfRegistrationEmailMustBeUnique If PatronSelfRegistrationVerifyByEmail and PatronSelfRegistrationEmailMustBeUnique are set, it should not be possible to register twice with the same email. However the test is made on already created patron cards when the registration is done. Which means it is possible to register several times with the same email address and click on the registration link to finalise the registration. This patch adds a test when the registration link is clicked and display the "Registration invalid" generic message if the same email is used Test plan: 1. Patron submits self registration form using the same email address 3 times 2. Patron receives 3 verification emails 3. Patron clicks on 3 verify token URLs => Only the first registration should succeed, the 2 others must fail Maybe we should display a more specific message? Signed-off-by: Owen Leonard <oleonard@myacpl.org> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Side note: It is still possible to register twice on the same email address. The pref name PatronSelfRegistrationEmailMustBeUnique implicitly conflicts with that. Note that imo allowing two registrations is probably preferred but the pref name could be seen as confusing.. Also if the email address is in one of the other columns like emailpro, the registration can be verified since we only look at the column email. Pushed to master for 18.05, thanks to everybody involved! |