Summary: | Allow viewing CMS pages when enforcing GDPR policy | ||
---|---|---|---|
Product: | Koha | Reporter: | Marcel de Rooy <m.de.rooy> |
Component: | Authentication | Assignee: | Marcel de Rooy <m.de.rooy> |
Status: | CLOSED FIXED | QA Contact: | Kyle M Hall (khall) <kyle> |
Severity: | enhancement | ||
Priority: | P5 - low | CC: | black23, dpavlin, kyle, mirjam.vantieghem |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | Trivial patch |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: |
22.11.00
|
|
Circulation function: | |||
Bug Depends on: | |||
Bug Blocks: | 18081 | ||
Attachments: |
Bug 31495: Allow opac-page when enforcing GDPR policy
Bug 31495: Allow opac-page when enforcing GDPR policy Bug 31495: Allow opac-page when enforcing GDPR policy |
Description
Marcel de Rooy
2022-08-31 11:55:52 UTC
Created attachment 140001 [details] [review] Bug 31495: Allow opac-page when enforcing GDPR policy Test plan: Add some page under Additional contents. Enforce GDPR policy. Test with user that has no consent (yet or anymore). Check if you can reach additional contents with opac-page.pl. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Note for testers or QA: We do not need this patch to handle anonymous access to opac-page.pl. If it is an opac page, it will show when not logged in. But this patch allows a logged in user to access opac-page while enforcing GDPR and not having given a consent yet. (He could e.g. read the privacy policy when that is implemented under additional contents.) Created attachment 140643 [details] [review] Bug 31495: Allow opac-page when enforcing GDPR policy Test plan: Add some page under Additional contents. Enforce GDPR policy. Test with user that has no consent (yet or anymore). Check if you can reach additional contents with opac-page.pl. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: David Nind <david@davidnind.com> (In reply to David Nind from comment #3) > Signed-off-by: David Nind <david@davidnind.com> Thx Created attachment 141513 [details] [review] Bug 31495: Allow opac-page when enforcing GDPR policy Test plan: Add some page under Additional contents. Enforce GDPR policy. Test with user that has no consent (yet or anymore). Check if you can reach additional contents with opac-page.pl. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: David Nind <david@davidnind.com> Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com> Pushed to master for 22.11. Nice work everyone, thanks! |