Bug 4193

Summary: Authentication with cardnumber/password at intranet allows superlibrarian access
Product: Koha Reporter: Henri-Damien LAURENT <henridamien>
Component: AuthenticationAssignee: Henri-Damien LAURENT <henridamien>
Status: CLOSED FIXED QA Contact: Bugs List <koha-bugs>
Severity: critical    
Priority: PATCH-Sent (DO NOT USE) CC: dev_patches, dpavlin
Version: rel_3_0   
Hardware: PC   
OS: All   
GIT URL: Change sponsored?: ---
Patch complexity: --- Documentation contact:
Documentation submission: Text to go in the release notes:
Version(s) released in:
Circulation function:
Attachments: patch proposed

Description Chris Cormack 2010-05-21 01:24:14 UTC


---- Reported by henridamien@koha-fr.org 2010-02-16 10:45:30 ----

Created an attachment
patch proposed

When an unpriviledged user is login in at intranet with his cardnumber/password, he gains superlibrarian access.



---- Additional Comments From henridamien@koha-fr.org 2010-02-16 10:46:44 ----

Note that the patch is on 3.0.x



--- Bug imported by chris@bigballofwax.co.nz 2010-05-21 01:24 UTC  ---

This bug was previously known as _bug_ 4193 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4193
Imported an attachment (id=1898)

Unknown Component Authentication
   Using default product and component set in Parameters 
Actual time not defined. Setting to 0.0
Setting qa contact to the default for this product.
   This bug either had no qa contact or an invalid one.
The original submitter of attachment 1898 [details] [review] is unknown.
   Reassigning to the person who moved it here: chris@bigballofwax.co.nz.