| Summary: | Two-factor authentication for staff client doesn't work for all staff accounts | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Kelly McElligott <kelly> |
| Component: | Authentication | Assignee: | Bugs List <koha-bugs> |
| Status: | RESOLVED DUPLICATE | QA Contact: | Testopia <testopia> |
| Severity: | major | ||
| Priority: | P5 - low | CC: | dpavlin, hebah, jonathan.druart, jzairo, kelly, laura, nick |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| Change sponsored?: | --- | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Bug Depends on: | 28786 | ||
| Bug Blocks: | |||
Correct, it should be
{ catalogue => 1 }
This is correct in master - we may have been testing an earlier version *** This bug has been marked as a duplicate of bug 30588 *** Workaround: superlibrarians can give cataloging permissions to staff in order for staff to activate 2FA. Cataloging permissions can then be removed after the staff person has completed 2FA setup. |
With the new feature, Two-factor authentication for staff client - TOTP, staff permissions seem to be needed to activate this: my ( $template, $loggedinuser, $cookie ) = get_template_and_user( { template_name => 'members/two_factor_auth.tt', query => $cgi, type => 'intranet', flagsrequired => { editcatalogue => '*' }, } ); which means that only staff with top-level catalogue permissions can activate their two-factor authentication. However, I believe this should be allowed by all staff accounts which would change this feature to allow staff to have just the "Staff access, allows viewing of catalogue in staff interface (catalogue) " permission.