https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39943

--- Comment #48 from Lari Taskula <[email protected]> ---
Created attachment 206752
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=206752&action=edit
Bug 39943: Add pin to FORBIDDEN_COLUMN_MATCHES

This patch prevents access to "pin" column from the reports module.

Co-credits to David Cook for proposing this change.

To test:
1. prove t/db_dependent/Koha/Reports.t
2. Create a new SQL report with the following SQL

SELECT pin FROM borrowers;

3. Run the report
4. Observe error "The column selection in this report includes a password
field."

Signed-off-by: Lari Taskula <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to