[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2023-10-14 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 Katrin Fischer changed: What|Removed |Added Resolution|--- |FIXED

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2023-06-01 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 --- Comment #23 from David Cook --- *** Bug 31050 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes. ___ Koha-bugs

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2022-11-22 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 --- Comment #22 from David Cook --- (In reply to Jonathan Druart from comment #21) > Any future plans to now use this new subroutine from other places? Patterned off bug 31050, this new subroutine would probably need to be

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2022-11-21 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 --- Comment #21 from Jonathan Druart --- Any future plans to now use this new subroutine from other places? -- You are receiving this mail because: You are watching all bug changes. ___

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2022-11-18 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 --- Comment #20 from Tomás Cohen Arazi --- Created attachment 144070 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=144070=edit Bug 32178: (QA follow-up) Correct modules import Signed-off-by: Tomas Cohen Arazi

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2022-11-18 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 --- Comment #19 from Tomás Cohen Arazi --- Created attachment 144069 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=144069=edit Bug 32178: Adapt tests to new auth.session params Signed-off-by: Tomas Cohen Arazi

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2022-11-15 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 --- Comment #18 from Tomás Cohen Arazi --- Pushed to master for 22.11. Nice work everyone, thanks! -- You are receiving this mail because: You are watching all bug changes. ___

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2022-11-15 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 Tomás Cohen Arazi changed: What|Removed |Added Version(s)||22.11.00

[Koha-bugs] [Bug 32178] query parameters in check_api_auth lets anyone assume a user id

2022-11-15 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32178 Tomás Cohen Arazi changed: What|Removed |Added Product|Koha security |Koha