Bug 22692: Check for patron using cardnumber and userid
authorNick Clemens <nick@bywatersolutions.com>
Fri, 12 Apr 2019 01:23:34 +0000 (01:23 +0000)
committerLucas Gass <lucas@bywatersolutions.com>
Mon, 29 Apr 2019 01:56:10 +0000 (01:56 +0000)
commit0c9e2bcf8791857f082f5abb83666169cf790057
treefcc45f98f5eed51440a104659faea581a4530b3a
parente732f496a49ee49c9b988b83bb937d95afed3f7e
Bug 22692: Check for patron using cardnumber and userid

TO test:
1 - Set failed login attempts to 1
2 - Attempt a login with a userid and bad password, no success
3 - Attempt a login with userid and correct password, prevented because
locked
4 - Attempt a login with cardnumber and right password, you are logged
in
5 - Log out, try again with userid and correct password, prevented
because locked?
6 - Apply patch
7 - Repeat 1-3 to lock account
8 - Attempt logging in with cardnumber, you are prevented

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit ebc15764ff3371a9327cfe60c22c1186e5a200ae)

Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
C4/Auth.pm