RE: Some CLIC libraries used to have this problem: FW: patrons se eing other patrons accounts

["Satzer, Patricia A." <PASATZER at stthomas dot edu>]

Thanks!
Paddy

-----Original Message-----
From: Deb Bergeron [mailto:bergeron at macalester dot edu] 
Sent: Friday, February 18, 2005 9:20 AM
To: Satzer, Patricia A.; lhill at kcls dot org
Cc: Mike Bloomberg; Chris Olson; Charlotte Knoche; innopac at innopacusers dot org;
Deb Kerkvliet; Nate Farley; Amy Kreitzer; Steve Waage; Ron Joslin; Hulbert,
Linda A.; Gene Kenney
Subject: Re: Some CLIC libraries used to have this problem: FW: patrons
seeing other patrons accounts

Paddy,

I've sent this information to both the person who initially inquired as 
well as the IUG listserv.


The log was c737009.  III provided a patch.  The issue was:

"...a problem with one campus http cache 'catching' one patron's
   My-Mill login..."      (our call #C737009a)

which was just assigned to my attention.  We have just added
this issue to our CSDirect "Known Issues" page, indicating that a
software patch to correct this behavior is available.  I took the liberty
of installing this patch to your system this morning.

I think it is worth emphasizing that this was a problem with browser
caching of the "You are logged in..." banner, but the new user inheriting
the banner was not really gaining access to the prior patron's record.
Our software does do proper cache-avoidance with sensitive patron
information, but the banner treatment was discovered to be an
exception for us in I.E., so our engineers addressed with this code
update.  Despite this being a display-only problem, we wanted to get
this fix out to you as soon as possible to allay concerns of your
members.  Can you devise a test at your end to see if this patch is
working to correct the problem?

I will hold this call open while I await your testing feedback.  If you
have any questions about this matter, don't hesitate to contact me 
directly. 
Thank you for your understanding.

Regards,
--Mark

That's Mark Welge from III.

deb

Satzer, Patricia A. wrote:

>ASAs,
>
>Does anybody remember how this problem was solved for the CLIC libraries?
>My memory tells me that it was reported by St. Kates, but my memory is not
>trustworthy...
>
>Paddy
>
>-----Original Message-----
>From: Lisa Hill [mailto:lhill at kcls dot org] 
>Sent: Tuesday, February 15, 2005 4:52 PM
>To: innopac at innopacusers dot org
>Subject: patrons seeing other patrons accounts
>
>Hello All:)
>We went off of Oracle and on to III's DB. 
> 
>As many of you remember, we were having some issues with instability- one
>problem where the patron logs in with his or her card number and PIN number
>and sees someone elses account- sadly has not gone away.
> 
>Has anyone else had this issue- this has happened twice over the weekend-
>and of course once is too many- but if any of you have any help you can
give
>me with this issue- I would  be **very very** grateful.
>Thanks:)
>Lisa
>
>--
>This message was distributed through the Innovative Users Group INNOPAC
list
>Public replies:  INNOPAC at innopacusers dot org
>Update your subscription options:
>http://innopacusers.org/mailman/listinfo/innopac
>
>
>  
>


--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---
--
This message was distributed through the Innovative Users Group INNOPAC list
Public replies:  INNOPAC at innopacusers dot org
Update your subscription options:
http://innopacusers.org/mailman/listinfo/innopac