[Koha-bugs] [Bug 25673] Access logging of borrower's personal information

2020-09-30 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25673

David Cook  changed:

   What|Removed |Added

 CC||dc...@prosentient.com.au

--- Comment #5 from David Cook  ---
(In reply to Joonas Kylmälä from comment #4)
> There was some confusion regarding this indeed. Koha and the webserver
> running in front of it provides already logs of similar content albeit in
> slightly harder to parse format. I feel like we can close this bug and
> re-open it later if somebody else is interested.

I don't know about Koha, but I imagine those web server logs are rotated and
old ones are deleted.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/


[Koha-bugs] [Bug 25673] Access logging of borrower's personal information

2020-09-29 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25673

--- Comment #4 from Joonas Kylmälä  ---
There was some confusion regarding this indeed. Koha and the webserver running
in front of it provides already logs of similar content albeit in slightly
harder to parse format. I feel like we can close this bug and re-open it later
if somebody else is interested.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/


[Koha-bugs] [Bug 25673] Access logging of borrower's personal information

2020-09-29 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25673

--- Comment #3 from Lari Taskula  ---
(In reply to Joonas Kylmälä from comment #0)
> I don't know if this is directly related to GDPR
By the way it looks like this is not required by GDPR. The Finnish libraries
that use it in their custom Koha fork were inspired by the laws for health care
sector, and decided to implement such functionality when there was still a lot
of confusion regarding GDPR.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/


[Koha-bugs] [Bug 25673] Access logging of borrower's personal information

2020-09-28 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25673

Lari Taskula  changed:

   What|Removed |Added

 CC||lari.task...@hypernova.fi

--- Comment #2 from Lari Taskula  ---
(In reply to Katrin Fischer from comment #1)
> I think logging every page could get a lot pretty fast.
Indeed. This is to be expected. Larger Koha instances are probably talking
about millions to tens of millions of log records of the access/view-event
annually. Not to forget their action_log could already be bloated.

One option would be to clear these logs periodically. The libraries that worry
about action_log size but still want to store it long-term, could consider
other means of storage. They could achieve that with Koha plugins.

There's even real world cases where Koha libraries enabled the "view" event
logging, and some of them regularly move this data into a separate database.
They were also the source to my log row count estimation in the first paragraph
of this comment.

> Maybe we could start with viewing a patron record? (accessing the detail page)
Splitting this into smaller parts is probably smart since it's going to affect
many pages.

> We should also make sure that patron batch edits are logged correctly.
+ REST API + other APIs. Figuring out all the places as well as making sure
that this policy applies to future changes - it's going to be a lot of careful
work :)

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/


[Koha-bugs] [Bug 25673] Access logging of borrower's personal information

2020-06-30 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25673

Andrew Nugged  changed:

   What|Removed |Added

 CC||nug...@gmail.com,
   ||slavashish...@gmail.com,
   ||stalkern...@gmail.com
   Assignee|koha-b...@lists.koha-commun |nug...@gmail.com
   |ity.org |

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
___
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/


[Koha-bugs] [Bug 25673] Access logging of borrower's personal information

2020-06-07 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25673

--- Comment #1 from Katrin Fischer  ---
I think it really depends on the type of library, country, use cases etc. I
think we'd definitely see some push back if we replaced the name by the
cardnumber in general as this is seen as a feature. Libraries often know their
patrons and want to see the names in a lot of cases. (think small company
libraries, professors at universities etc.)

But: we already have HidePatronName which makes this configurable in a lot of
places that we could extend further.

I think logging every page could get a lot pretty fast. Maybe we could start
with viewing a patron record? (accessing the detail page)
We should also make sure that patron batch edits are logged correctly.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
___
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/


[Koha-bugs] [Bug 25673] Access logging of borrower's personal information

2020-06-04 Thread bugzilla-daemon
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25673

Jonathan Druart  changed:

   What|Removed |Added

 CC||jonathan.dru...@bugs.koha-c
   ||ommunity.org

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/