Bug 39374 - No way to restrict OPAC users from Sending lists
Summary: No way to restrict OPAC users from Sending lists
Status: Needs Signoff
Alias: None
Product: Koha
Classification: Unclassified
Component: Lists (show other bugs)
Version: Main
Hardware: All All
: P5 - low minor
Assignee: David Cook
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-03-19 03:00 UTC by David Cook
Modified: 2025-03-20 02:07 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: Small patch
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 39374: Add feature to block sending of lists from OPAC (4.61 KB, patch)
2025-03-20 02:06 UTC, David Cook
Details | Diff | Splinter Review
Bug 39374: Database changes (2.54 KB, patch)
2025-03-20 02:06 UTC, David Cook
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description David Cook 2025-03-19 03:00:21 UTC
At the moment, there's no way to prevent OPAC users from Sending lists. 

There are situations where you don't want your OPAC user to be able to generate emails, especially with user-generated content in the comments field.
Comment 1 David Cook 2025-03-20 02:06:53 UTC
Created attachment 179494 [details] [review]
Bug 39374: Add feature to block sending of lists from OPAC

This change adds a system preference OPACDisableSendList which
disables the ability to send lists from the OPAC, and hides the
"Send list" link on the opac-shelves.pl page.

This is useful in situations where you do not want OPAC users to be
able to generate emails to arbitrary addresses with arbitrary comments.

Test plan:
0. Apply the patch and koha-plack --restart kohadev
1. Create a public list with at least one record and view it in the OPAC
2. Click "Send list" and note you can fill out boxes for "Email address"
and "Comment"
3. Change syspref OPACDisableSendList to "Don't allow" and click "Send list"
again
4. Note the popup window now says "You do not have permission to send this list."
5. Reload the list web page and notice "Send list" no longer appears on the toolbar
next to "Print list"
Comment 2 David Cook 2025-03-20 02:06:56 UTC
Created attachment 179495 [details] [review]
Bug 39374: Database changes