Bug 25613

Summary: Broken workflow on CAS login with wrong permissions
Product: Koha Reporter: Tomás Cohen Arazi <tomascohen>
Component: AuthenticationAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: major    
Priority: P5 - low CC: dpavlin, martin.renvoize, matthias.meusburger, nick
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:

Description Tomás Cohen Arazi 2020-05-27 22:44:07 UTC
If you set to login through CAS, and don't have enough permissions for the admin interface, you get into a loop in which you cannot re-try with other credentials, unless you clean the CAS cookies.

This also happens when the user doesn't match any user in Koha's DB.

This can be very problematic.
Comment 1 Tomás Cohen Arazi 2020-05-28 13:39:49 UTC
The only solution I find, is providing a message with a logout from CAS button/option:
- In case the user is not a valid Koha user 'The CAS user is not a valid Koha user, please logout if you want to try another user'
- In case the user does not have the right permissions 'The CAS user doesn't have the required permissions, please logout if you want to try another user'