Bug 41292 - Add "force_password_reset_when_set_by_staff" to column name whitelist
Summary: Add "force_password_reset_when_set_by_staff" to column name whitelist
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Reports (show other bugs)
Version: 25.05
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-11-24 16:39 UTC by George Williams (NEKLS)
Modified: 2025-11-24 16:39 UTC (History)
1 user (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Comma delimited list of Sponsors:
Crowdfunding goal: 0
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description George Williams (NEKLS) 2025-11-24 16:39:26 UTC
Bug 37508 added filters to Koha SQL reports and prevents them from using column names containing sensitive information.  It also created a whitelist of non-sensitive columns that are accidentally blocked by that same filter.

Bug 33462 added categories.force_password_reset_when_set_by_staff as a new column in the database.

categories.force_password_reset_when_set_by_staff contains no sensitive data but is still blocked by the filters created in Bug 37508.  

categories.force_password_reset_when_set_by_staff should be added to the whitelist.