Bug 37692

Summary: Self-registration verification cannot be done if OPACPublic is not allowed
Product: Koha Reporter: Olli-Antti Kivilahti <olli-antti.kivilahti>
Component: OPACAssignee: Olli-Antti Kivilahti <olli-antti.kivilahti>
Status: Failed QA --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: david, fiona.borthwick, sam.sowanick
Version: 24.05   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:
Attachments: Bug 37692 - Self-registration verification cannot be done if OPACPublic is not allowed

Description Olli-Antti Kivilahti 2024-08-20 18:11:29 UTC
User needs to be logged in to verify his pending account creation.
Comment 1 Olli-Antti Kivilahti 2024-08-27 11:05:02 UTC
Created attachment 170761 [details] [review]
Bug 37692 - Self-registration verification cannot be done if OPACPublic is not allowed

Registering new accounts need to be done even though OPAC requires login.
Comment 2 SamSowanick 2024-09-04 19:30:20 UTC
Can you please include a test / sign off plan.

Sam.
Comment 3 David Nind 2024-09-08 21:50:42 UTC
I changed the assignee.
Comment 4 Fiona Borthwick 2024-09-26 18:47:09 UTC
Failing QA due to missing test plan
Comment 5 Olli-Antti Kivilahti 2024-09-27 05:26:38 UTC
Test plan:

1. Set syspref OPACPublic to "not-public"
2. OPAC Self-registration verification link is not accessible for users not-logged-in
Comment 6 Olli-Antti Kivilahti 2024-09-27 06:01:54 UTC
The real question is, is this something that should be done, in this way, from a security-perspective?
Obviously something needs to be done since the OPACSelfRegistration-feature doesnt work without this.