Reading the patch, one thing that strikes me is that it looks like it would provide a (rather motivated) patron who has expired privileges a way to bypass that check and successfully renew loans by passing in a checkout_time key.
Jason, given the age of this patch and the possibility of direct inserts into action.circulation during data migration, do you still need this?
Reading the patch, one thing that strikes me is that it looks like it would provide a (rather motivated) patron who has expired privileges a way to bypass that check and successfully renew loans by passing in a checkout_time key.
Jason, given the age of this patch and the possibility of direct inserts into action.circulation during data migration, do you still need this?