Very tiny adjustment in Auth module: When the user gave no consent yet, we could allow him to see opac-page.pl. These are actually CMS pages that could be viewed as standing next to the library catalogue. It also allows you to use opac-page for the privacy policy page.
Created attachment 140001 [details] [review] Bug 31495: Allow opac-page when enforcing GDPR policy Test plan: Add some page under Additional contents. Enforce GDPR policy. Test with user that has no consent (yet or anymore). Check if you can reach additional contents with opac-page.pl. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Note for testers or QA: We do not need this patch to handle anonymous access to opac-page.pl. If it is an opac page, it will show when not logged in. But this patch allows a logged in user to access opac-page while enforcing GDPR and not having given a consent yet. (He could e.g. read the privacy policy when that is implemented under additional contents.)
Created attachment 140643 [details] [review] Bug 31495: Allow opac-page when enforcing GDPR policy Test plan: Add some page under Additional contents. Enforce GDPR policy. Test with user that has no consent (yet or anymore). Check if you can reach additional contents with opac-page.pl. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: David Nind <david@davidnind.com>
(In reply to David Nind from comment #3) > Signed-off-by: David Nind <david@davidnind.com> Thx
Created attachment 141513 [details] [review] Bug 31495: Allow opac-page when enforcing GDPR policy Test plan: Add some page under Additional contents. Enforce GDPR policy. Test with user that has no consent (yet or anymore). Check if you can reach additional contents with opac-page.pl. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: David Nind <david@davidnind.com> Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Pushed to master for 22.11. Nice work everyone, thanks!