https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962

--- Comment #108 from Martin Renvoize (ashimema) 
<[email protected]> ---
Created attachment 194309
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194309&action=edit
Bug 14962: (QA follow-up) Filter inactive display items from public API

The public list_public endpoint in Koha::REST::V1::DisplayItems was
returning every display_items row with no filtering. Unauthenticated
OPAC users could enumerate items from disabled, expired, or future
displays.

Apply the same active-display criteria used elsewhere in the feature:
parent display must be enabled and within its start/end date range, and
the individual item's date_remove must not have passed.

Sponsored-by: ByWater Solutions
Signed-of-by: Martin Renvoize <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to