Bug 21533: Do not allow password recovery for administrative locked patrons
authorMarcel de Rooy <m.de.rooy@rijksmuseum.nl>
Wed, 10 Oct 2018 12:49:02 +0000 (14:49 +0200)
committerNick Clemens <nick@bywatersolutions.com>
Fri, 10 May 2019 12:19:13 +0000 (12:19 +0000)
commitd35cc83379fae8998b1b9828c8fdb05746b44287
tree5ae6c631df40616766594c47ba3973c2438633e5
parent5ecbe281aff13e53d4fbc5064714de9209410358
Bug 21533: Do not allow password recovery for administrative locked patrons

Depends on bug 21336 for the ADMINISTRATIVE_LOCKOUT constant.

This is a bit lazy solution (but good enough): The account will not be found
when recovering the password. The user should contact the library. Since
the library chose to lock the account, that seems appropriate.

Test plan:
Select a borrower and set login_attempts to -1. Via mysql command line or
with Koha::Patrons->find(borrowernumber)->lock.
Enable password recovery.
Try to recover password from OPAC. You should fail with 'Not found, contact
the library'.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Owen Leonard <oleonard@myacpl.org>
Signed-off-by: Bouzid Fergani <bouzid.fergani@inlibro.com>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
opac/opac-password-recovery.pl