Bug 30968 - opac-authorites-home.pl still accessible even when OpacAuthorities system preference is turned off
Summary: opac-authorites-home.pl still accessible even when OpacAuthorities system pre...
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: OPAC (show other bugs)
Version: 25.05
Hardware: All All
: P5 - low enhancement
Assignee: Owen Leonard
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-06-15 15:50 UTC by Liz Rea
Modified: 2026-02-02 01:01 UTC (History)
2 users (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Comma delimited list of Sponsors:
Crowdfunding goal: 0
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Liz Rea 2022-06-15 15:50:35 UTC
When the system preference OpacAuthorities is turned off, the page https://your.library.here/cgi-bin/koha/opac-authorities-home.pl is still accessible and likely shouldn't be. 

To test: 

set OpacAuthorities to Don't Allow
try to visit https://your.library.here/cgi-bin/koha/opac-authorities-home.pl 
note that the page is still accessible.

Thanks for checking it out!

Liz
Comment 1 Raina 2026-01-30 18:12:09 UTC
We noticed this issue as well in our consortium. We have OpacAuthorities off, yet a user can still access the Authority Search and search successfully, and there are many access points from a record. Having OpacAuthorities set to "don't allow" should prevent the Authority Search from being accessible to users in the OPAC. 

Users can access the authority search from a record even if OpacAuthorities is turned off. To test: 
- OpacAuthorities set to "don't allow" 
- In the OPAC, go to a catalog record that has authorities linked, for example, contributors or subject headings that have authority records. 
- If there is a linked authority, the contributor (for example) will show up as linked text with a magnifying glass icon to the right of the linked text. 
- Click on the magnifying glass icon to go to the authority page (e.g. /opac-authoritiesdetail.pl?authid=#).
- Click on "Authority Search" breadcrumb to access the authority search, and complete a search for authority records.