Holds can be placed with an inactive card

Bug #1783151 reported by Dawn Dale
20
This bug affects 4 people
Affects Status Importance Assigned to Milestone
Evergreen
Confirmed
Undecided
Unassigned

Bug Description

In 3.0.2 Patrons and staff can place a hold with an inactive card without warning. By inactive card I mean an older card number that has been replaced with a new card. Sometimes patrons will find an older card and think it is the current card and use it. We would like Evergreen to at least give a warning when an inactive card is used if or prevent the hold from being placed.

Thanks,

Tags: circ-holds
Revision history for this message
Joan Kranich (jkranich) wrote :

Evergreen Release 3.0.11
Browser Chrome

I have confirmed the Web Client allows a Hold to be placed using an inactive barcode.

Changed in evergreen:
status: New → Confirmed
tags: added: holds
Revision history for this message
April Durrence (april-durrence) wrote :

Related to this bug: https://bugs.launchpad.net/evergreen/+bug/1748464

In the XUL client, an alert message displays when a patron account is retrieved with an inactive barcode and the checkout entry box is grayed out and not usable. In testing, I did seem to be able to place holds even after retrieving with the inactive barcode, but that was after viewing the very prominent alert message.

When I tested in the web client, I was able to retrieve the account with the inactive barcode (both by patron search and using the checkout function) without any alert message displaying in either case. The checkout entry box was active for checkout, so there was absolutely no indication that the account was retrieved with an inactive barcode.

Dan Briem (dbriem)
tags: added: circ-holds
removed: holds
Revision history for this message
Lindsay Stratton (lstratton) wrote :

I also commented this is bug 1748464 -

a lost/replaced card would either:

1 - NOT retrieve the record at all

Or

2 - If an account is retrieved, all transactions are blocked

The ability for lost/replaced cards to be used for circ, and access a patron's account information, could be a security and privacy risk.

I would like to see lost/replaced cards handled in the same way as merged records, with library settings that allow to delete the address, delete the barcode, deactivate the card.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.