Bug 25613 - Broken workflow on CAS login with wrong permissions
Summary: Broken workflow on CAS login with wrong permissions
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: Main
Hardware: All All
: P5 - low major (vote)
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-05-27 22:44 UTC by Tomás Cohen Arazi
Modified: 2023-09-22 07:57 UTC (History)
4 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tomás Cohen Arazi 2020-05-27 22:44:07 UTC
If you set to login through CAS, and don't have enough permissions for the admin interface, you get into a loop in which you cannot re-try with other credentials, unless you clean the CAS cookies.

This also happens when the user doesn't match any user in Koha's DB.

This can be very problematic.
Comment 1 Tomás Cohen Arazi 2020-05-28 13:39:49 UTC
The only solution I find, is providing a message with a logout from CAS button/option:
- In case the user is not a valid Koha user 'The CAS user is not a valid Koha user, please logout if you want to try another user'
- In case the user does not have the right permissions 'The CAS user doesn't have the required permissions, please logout if you want to try another user'