Bug 19881

Summary: authorities-list.pl can be executed by anybody
Product: Koha Reporter: Jonathan Druart <jonathan.druart>
Component: Architecture, internals, and plumbingAssignee: Jonathan Druart <jonathan.druart>
Status: CLOSED FIXED QA Contact: Testopia <testopia>
Severity: major    
Priority: P5 - low CC: fridolin.somers, jonathan.druart, katrin.fischer, nick
Version: unspecified   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: Trivial patch
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Attachments: Bug 19881: Remove authorities-list.pl
Bug 19881: Remove authorities-list.pl
Bug 19881: Remove authorities-list.pl

Description Jonathan Druart 2017-12-26 21:05:43 UTC
This script must be removed as it can be executed without permissions (!)
And... it retrieves all authorities.
I let your imagination running wild to know what it is possible to do with that script...
Comment 1 Jonathan Druart 2017-12-26 21:06:47 UTC
Created attachment 70166 [details] [review]
Bug 19881: Remove authorities-list.pl

For obvious reasons...
Comment 2 Katrin Fischer 2017-12-26 22:26:43 UTC
Created attachment 70168 [details] [review]
Bug 19881: Remove authorities-list.pl

For obvious reasons...

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Comment 3 Nick Clemens 2018-01-05 11:15:26 UTC
Created attachment 70282 [details] [review]
Bug 19881: Remove authorities-list.pl

For obvious reasons...

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Comment 4 Jonathan Druart 2018-02-15 19:08:06 UTC
Patch pushed to
* master for 18.05
* 17.11.x for v17.11.02
* 17.05.x for v17.05.08