Re: Some CLIC libraries used to have this problem: FW: patrons seeing other patrons accounts

[Deb Bergeron <bergeron at macalester dot edu>]

Paddy,

I've sent this information to both the person who initially inquired as 
well as the IUG listserv.


The log was c737009.  III provided a patch.  The issue was:

"...a problem with one campus http cache 'catching' one patron's
  My-Mill login..."      (our call #C737009a)

which was just assigned to my attention.  We have just added
this issue to our CSDirect "Known Issues" page, indicating that a
software patch to correct this behavior is available.  I took the liberty
of installing this patch to your system this morning.

I think it is worth emphasizing that this was a problem with browser
caching of the "You are logged in..." banner, but the new user inheriting
the banner was not really gaining access to the prior patron's record.
Our software does do proper cache-avoidance with sensitive patron
information, but the banner treatment was discovered to be an
exception for us in I.E., so our engineers addressed with this code
update.  Despite this being a display-only problem, we wanted to get
this fix out to you as soon as possible to allay concerns of your
members.  Can you devise a test at your end to see if this patch is
working to correct the problem?

I will hold this call open while I await your testing feedback.  If you
have any questions about this matter, don't hesitate to contact me 
directly. 
Thank you for your understanding.

Regards,
--Mark

That's Mark Welge from III.

deb

Satzer, Patricia A. wrote:

> ASAs,
>
> Does anybody remember how this problem was solved for the CLIC libraries?
> My memory tells me that it was reported by St. Kates, but my memory is not
> trustworthy...
>
> Paddy
>
> -----Original Message-----
> From: Lisa Hill [mailto:lhill at kcls dot org] 
> Sent: Tuesday, February 15, 2005 4:52 PM
> To: innopac at innopacusers dot org
> Subject: patrons seeing other patrons accounts
>
> Hello All:)
> We went off of Oracle and on to III's DB. 
>
> As many of you remember, we were having some issues with instability- one
> problem where the patron logs in with his or her card number and PIN number
> and sees someone elses account- sadly has not gone away.
>
> Has anyone else had this issue- this has happened twice over the weekend-
> and of course once is too many- but if any of you have any help you can give
> me with this issue- I would  be **very very** grateful.
> Thanks:)
> Lisa
>
> --
> This message was distributed through the Innovative Users Group INNOPAC list
> Public replies:  INNOPAC at innopacusers dot org
> Update your subscription options:
> http://innopacusers.org/mailman/listinfo/innopac
>
>
>  


--- StripMime Report -- processed MIME parts ---
multipart/alternative
 text/plain (text body -- kept)
 text/html
---