https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39375
Bug ID: 39375
Summary: About page accessible to low privileged staff users
Change sponsored?: ---
Product: Koha
Version: Main
Hardware: All
OS: All
Status: NEW
Severity: minor
Priority: P5 - low
Component: About
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
At the moment, anyone with staff interface access can visit the About page at
about.pl.
There's privileged information available via that interface
--
This is something we seem to acknowledge in
koha-tmpl/intranet-tmpl/prog/en/modules/circ/returns.tt:
<p class="problem ret_datacorrupt">The item has not been checked in due to a
configuration issue in your system. You must ask an administ
rator to take a look at the <a
href="/cgi-bin/koha/about.pl#sysinfo_panel">about page</a> and correct all
errors shown on the "System information" tab</p>
That said, koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt says
<div class="dialog message">ILL module configuration problem. Take a look at
the <a href="/cgi-bin/koha/about.pl#sysinfo_panel">about page</a></div>
So we should probably update ill-requests.tt to match returns.tt
--
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
