Bug 37692 - Self-registration verification cannot be done if OPACPublic is not allowed
Summary: Self-registration verification cannot be done if OPACPublic is not allowed
Status: Failed QA
Alias: None
Product: Koha
Classification: Unclassified
Component: OPAC (show other bugs)
Version: 24.05
Hardware: All All
: P5 - low enhancement
Assignee: Olli-Antti Kivilahti
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-08-20 18:11 UTC by Olli-Antti Kivilahti
Modified: 2024-09-27 06:01 UTC (History)
3 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 37692 - Self-registration verification cannot be done if OPACPublic is not allowed (1.77 KB, patch)
2024-08-27 11:05 UTC, Olli-Antti Kivilahti
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Olli-Antti Kivilahti 2024-08-20 18:11:29 UTC
User needs to be logged in to verify his pending account creation.
Comment 1 Olli-Antti Kivilahti 2024-08-27 11:05:02 UTC
Created attachment 170761 [details] [review]
Bug 37692 - Self-registration verification cannot be done if OPACPublic is not allowed

Registering new accounts need to be done even though OPAC requires login.
Comment 2 SamSowanick 2024-09-04 19:30:20 UTC
Can you please include a test / sign off plan.

Sam.
Comment 3 David Nind 2024-09-08 21:50:42 UTC
I changed the assignee.
Comment 4 Fiona Borthwick 2024-09-26 18:47:09 UTC
Failing QA due to missing test plan
Comment 5 Olli-Antti Kivilahti 2024-09-27 05:26:38 UTC
Test plan:

1. Set syspref OPACPublic to "not-public"
2. OPAC Self-registration verification link is not accessible for users not-logged-in
Comment 6 Olli-Antti Kivilahti 2024-09-27 06:01:54 UTC
The real question is, is this something that should be done, in this way, from a security-perspective?
Obviously something needs to be done since the OPACSelfRegistration-feature doesnt work without this.