Summary: | Better failure message when patrons can't log into the Opac due to self check permissions | ||
---|---|---|---|
Product: | Koha | Reporter: | Margaret Hade <margaret> |
Component: | Self checkout | Assignee: | Bugs List <koha-bugs> |
Status: | NEW --- | QA Contact: | Testopia <testopia> |
Severity: | trivial | ||
Priority: | P5 - low | CC: | dcook, jonathan.druart, margaret |
Version: | unspecified | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | --- |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: |
Description
Margaret Hade
2020-08-26 22:29:04 UTC
Hi Margaret, I don't think it is valid, at least not what you are suggesting. We should not tell the username is valid, even less it's a specific account. I don't have much to suggest however. Maybe we could display the specific/reserved (anonymous, selfcheck) patrons on the about page? Maybe we could also display a warning on one account pages on the staff side that the patron cannot log into the OPAC and is only to be used for the self check? I agree with Jonathan that we can't give away any information about users or their permissions on the OPAC when unauthenticated due to security concerns. I like Katrin's idea. |