1 = Evergreen 3.9 Release Notes =
8 This release contains bug fixes improving on Evergreen 3.9.2. This release also includes
9 fixes for three security bugs.
14 * https://bugs.launchpad.net/evergreen/+bug/1972738[Bug 1972738] requires a schema update
15 * https://bugs.launchpad.net/evergreen/+bug/1920826[Bug 1920826] requires a schema update
17 === Security Fixes ===
19 ==== Fix SQL Injection Vulnerability ====
21 An SQL injection vulnerability related to the implementation of
22 search term highlights is now closed.
24 This is https://bugs.launchpad.net/evergreen/+bug/2004055[Bug 2004055].
26 ==== Malicious Search Protection ====
28 Evergreen sometimes sees some "novel" query strings in the wild that
29 cause the search backend to time out or worse. These are sometimes
30 malicious and sometimes accidental, but the effect on users is the
33 The changes here improve query compilation in several respects in order
34 to reduce the chances of an overly complex query causing problems for
37 More work is done up front to simplify and combine parts of the
38 resulting SQL, allowing more work to be done closer to the data.
39 This change allows Evergreen to handle many more tested or chained
40 boolean expressions, and negated terms are now handled directly in
41 line with other adjacent terms. Phrases (exact matches) are now
42 searched for using Postgres' adjacency tsearch operator.
44 All of these changes work together to improve performance by getting
45 more search work done in fewer database operations while protecting
46 against certain query constructs that have caused problems in the
49 This is https://bugs.launchpad.net/evergreen/+bug/1775958[Bug 1775958].
51 ==== Restrict login redirect ====
53 As a security best-practice, Evergreen should not allow arbitrary
54 redirection on successful login, but instead limit redirection to
55 local links or configured domains and schemes.
57 This feature is controlled by a new global flag called *opac.login_redirect_domains*
58 which must contain a comma-separated list of domains. All hostnames
59 under each domain is allowed for redirect, and the scheme of the
60 redirect URL must be one of http, https, ftp, or ftps.
62 This is https://bugs.launchpad.net/evergreen/+bug/1908576[Bug 1908576].
66 ==== Accessibility ====
68 * Fixes duplicate ID in staff catalog bib actions (https://bugs.launchpad.net/evergreen/+bug/2016341[Bug 2016341])
69 * Adds empty alt attributes for images and icons that already have equivalent text representation (https://bugs.launchpad.net/evergreen/+bug/2018208[Bug 2018208])
70 * Adds labeling to captcha math problem in OPAC (https://bugs.launchpad.net/evergreen/+bug/2015141[Bug 2015141])
71 * Fixes tab order in adminitration splash pages (https://bugs.launchpad.net/evergreen/+bug/2015137)
72 * Fixes default modal background color (https://bugs.launchpad.net/evergreen/+bug/2008918[Bug 2008918])
73 * Adds aria-label to staff catalog search +/- buttons (https://bugs.launchpad.net/evergreen/+bug/2002363[Bug 2002363])
76 ==== Administration ====
78 * Deduplicates entries in ils_events.xml (https://bugs.launchpad.net/evergreen/+bug/1369345[Bug 1369345])
79 * Encourages distinct results when querying ahopl IDL source (https://bugs.launchpad.net/evergreen/+bug/1964986[Bug 1964986])
80 * Restores missing database updates for version-upgrade from 3.5.1 to 3.6.0 (https://bugs.launchpad.net/evergreen/+bug/1920826[Bug 1920826])
81 * Improved error handling by open-ils.pcrud (https://bugs.launchpad.net/evergreen/+bug/1808016[Bug 1808016])
87 * Adds consistency to SMS Carrier dropdown display (https://bugs.launchpad.net/evergreen/+bug/1889916[Bug 1889916])
92 * Ensures authority linker is working in all embedded MARC editors (https://bugs.launchpad.net/evergreen/+bug/1716479[Bug 1716479])
96 * Adds a note to the Mark Patron Email Invalid function (https://bugs.launchpad.net/evergreen/+bug/1752334[Bug 1752334])
97 * Treats empty string as null for preferred name field (https://bugs.launchpad.net/evergreen/+bug/1996651[Bug 1996651])
98 * Fixes incorrect total circs in Item Status Detail View (https://bugs.launchpad.net/evergreen/+bug/2018534[Bug 2018534])
99 * Removes irrelevant actions from Hold Shelf actions menu (https://bugs.launchpad.net/evergreen/+bug/2004052[Bug 2004052])
100 * Removes patron information from the 'Check Out Staff' field in Item Status Circ History list (https://bugs.launchpad.net/evergreen/+bug/2001728[Bug 2001728])
101 * Fixes a caching issue that occasionally caused incorrect holds addresses to print on transit slips (https://bugs.launchpad.net/evergreen/+bug/1778567[Bug 1778567])
105 * Adds index to speed up display of the Hopeless Holds interface in large systems (https://bugs.launchpad.net/evergreen/+bug/1972738[Bug 1972738])
106 * Adds validator to Survey Date so surveys can not be created with an end date before their start date (https://bugs.launchpad.net/evergreen/+bug/1879517[Bug 1879517])
107 * Quiets extraneous console noise in some AngularJS grids (https://bugs.launchpad.net/evergreen/+bug/2013223[Bug 2013223])
108 * Restores correct link to AngularJS Patron Requests interface (https://bugs.launchpad.net/evergreen/+bug/2019150[Bug 2019150])
110 ==== Course Materials ====
112 * Fixes circ modifier column in Course Materials grid (https://bugs.launchpad.net/evergreen/+bug/1972917[Bug 1972917])
115 ==== Documentation ====
117 * Fixes to Server Installation documentation
118 * Updates to Record Buckets documentation (https://bugs.launchpad.net/evergreen/+bug/1845253[Bug 1845253])
119 * Updates to Fonts & Sound Settings documentation
123 * Fixes button styling in Boostrap OPAC (https://bugs.launchpad.net/evergreen/+bug/1981774[Bug 1981774])
124 * Adjusts functionality of "Where" button in OPAC (https://bugs.launchpad.net/evergreen/+bug/1970476[Bug 1970476])
125 * Fixes label alignment in MyAccount Circ History (https://bugs.launchpad.net/evergreen/+bug/2015481[Bug 2015484])
127 ==== Miscellaneous ====
129 * Corrects test error due to erroneous commit in https://bugs.launchpad.net/evergreen/+bug/2002435[Bug 2002435]
130 * Adds fixes to AngularJS test suite (https://bugs.launchpad.net/evergreen/+bug/1915326[Bug 1915326])
136 === Acknowledgements ===
138 We would like to thank the following individuals who contributed code, testing, and documentation to the 3.9.3 point release of Evergreen:
148 * Blake Graham-Henderson
155 * Andrea Buntz Neiman
167 == Evergreen 3.9.2 ==
169 This release contains bug fixes improving on Evergreen 3.9.1. This release includes
170 fixes for two security bugs.
172 === Security Fixes ===
174 ==== Protect qtype CGI Parameter ====
176 Malicious DoS attempts have been witnessed in the wild making use of
177 the fact that Evergreen does not check the contents of the `qtype` CGI
178 parameter. While these fail their intent, it would be better to
179 simply drop such searches on the floor when they're seen.
181 Evergreen will now confirm that the search class in the `qtype` parameter
182 is valid, and that the remainder of the value is structured correctly,
183 before processing the search request.
185 This is https://bugs.launchpad.net/evergreen/+bug/1811685[Bug 1811685].
187 ==== Catalog Search Denial of Service Protection ====
189 Here we add two ways to protect against denial of service attacks:
191 * Limit concurrent search requests per client IP address
192 ** This helps address issues of accidental spamming from a malfunctioning OPAC workstation, or web crawlers of various types. The limit is controlled by a global flag called *opac.max_concurrent_search.ip*. By default there is no limit set.
193 * Limit the global concurrent search requests for the same query
194 ** This helps address both simple and distributed DoS that send the same search request over and over. The limit is controlled by a global flag called *opac.max_concurrent_search.query*, and defaults to 20.
196 When a limit is exceeded the client receives an HTTP 429 "Too many requests" response from the web server, and the connection is ended.
198 This is https://bugs.launchpad.net/evergreen/+bug/1361782[Bug 1361782].
200 === Upgrade notes ===
202 * https://bugs.launchpad.net/evergreen/+bug/2003707[Bug 2003707] - During upgrade, if you're running with `opensrf_core.xml` located anywhere other than `/openils/conf` in a single-tenant manner, make sure that `SYSCONFDIR` as set in `autogen.sh` matches what's set in the installed `Cronscript.pm`
203 * https://bugs.launchpad.net/evergreen/+bug/1998355[Bug 1998355] requires a schema upgrade
204 * https://bugs.launchpad.net/evergreen/+bug/1441750[Bug 1441750] requires a schema upgrade
205 * https://bugs.launchpad.net/evergreen/+bug/1361782[Bug 1361782] requires a schema upgrade
209 ==== Accessibility ====
211 * Fixes color contrast on modal headers (https://bugs.launchpad.net/evergreen/+bug/1999954[Bug 1999954])
212 * Adds input labels in the manage authorities interface fields (https://bugs.launchpad.net/evergreen/+bug/1989284[Bug 1989284)]
214 ==== Administration ====
216 * `autogen.sh` can now accept a `-c` switch to specify the location of `opensrf_core.xml`. This is useful for certain multi-tenant setups of Evergreen. (https://bugs.launchpad.net/evergreen/+bug/2003707[Bug 2003707])
217 * Avoids permission lookup when there's no authtoken (https://bugs.launchpad.net/evergreen/+bug/1990306[Bug 1990306])
218 * Fixes an issue with `marc_stream_importer.pl` temp file creation (https://bugs.launchpad.net/evergreen/+bug/1943634[Bug 1943634])
219 * Adds patron database ID to Stripe payment record (https://bugs.launchpad.net/evergreen/+bug/1969994[Bug 1969994])
220 * Fix to prevent multiple server processes from being created by `oils_ct.sh` (https://bugs.launchpad.net/evergreen/+bug/1908455[Bug 1908455])
221 * Fixes an issue where last-copy delete was not creating hold notices (https://bugs.launchpad.net/evergreen/+bug/2007591[Bug 2007591])
222 * Fix to reduce bloating of `search.symspell_dictionary` (https://bugs.launchpad.net/evergreen/+bug/1998355[Bug 1998355])
223 * Fix to allow legacy `mod_perl` handlers to check `eg.auth.token` (https://bugs.launchpad.net/evergreen/+bug/1996908[Bug 1996908])
224 * Fix to change legacy `ARRAY_TO_STRING(ARRAY_AGG())\ functions to `STRING_AGG()` functions (https://bugs.launchpad.net/evergreen/+bug/1441750[Bug 1441750])
225 * Fixes typo in `AddedContent.pm` (https://bugs.launchpad.net/evergreen/+bug/2012105[Bug 2012105])
229 * Enables keyboard tabbing for search results pagination (https://bugs.launchpad.net/evergreen/+bug/1993859[Bug 1993859])
230 * Fixes an error emailing records from the staff catalog & OPAC (https://bugs.launchpad.net/evergreen/+bug/1955079[Bug 1955079])
231 * Removes deleted call numbers from shelf browse (https://bugs.launchpad.net/evergreen/+bug/2003742[Bug 2003742])
235 * Fixes issue where holdings template importer wouldn't import the full file (https://bugs.launchpad.net/evergreen/+bug/1980544[Bug 1980544])
236 * Fixes an issue where statcats in holding templates wouldn't save correctly (https://bugs.launchpad.net/evergreen/+bug/1999696[Bug 1999696])
237 * Fixes inconsistent button placement in delete holdings modal (https://bugs.launchpad.net/evergreen/+bug/1945355[Bug 1945355])
238 * Adds styling to show that a holding template changed a statcat value (https://bugs.launchpad.net/evergreen/+bug/2003755[Bug 2003755])
239 * Fixes erroneous error message in cover image upload modal (https://bugs.launchpad.net/evergreen/+bug/1988321[Bug 1988321])
240 * Fixes an issue where last-copy delete was not creating hold notices (https://bugs.launchpad.net/evergreen/+bug/2007591[Bug 2007591])
241 * Restores the ability to create empty call numbers in the holdings editor (https://bugs.launchpad.net/evergreen/+bug/1998494[Bug 1998494])
242 * Fixes MARC editor heading linker for fields 600, 651, and 655 (https://bugs.launchpad.net/evergreen/+bug/2007351[Bug 2007351])
243 * Protects "magic" statuses from overwrite when using holdings editor template (https://bugs.launchpad.net/evergreen/+bug/1999401[Bug 1999401])
244 * Prevents deletion of shelving locations with items attached + adds undelete action on shelving location editor (https://bugs.launchpad.net/evergreen/+bug/2002435[Bug 2002435])
245 * Fixes item tag scoping in holdings editor (https://bugs.launchpad.net/evergreen/+bug/1965447[Bug 1965447])
247 ==== Circulation ====
249 * Adds progress bar when renewing items (https://bugs.launchpad.net/evergreen/+bug/1755876[Bug 1755876])
250 * Clears `hopeless_date` when hold is captured (https://bugs.launchpad.net/evergreen/+bug/1915440[Bug 1915440])
251 * Fixes an issue where large hold shelf lists could fail to load (https://bugs.launchpad.net/evergreen/+bug/1971745[Bug 1971745])
252 * Fixes slowness in the holds shelf query (https://bugs.launchpad.net/evergreen/+bug/1971745[Bug 1971745])
253 * Fixes an issue where the patron registration form sent unnecessarily large amount of data upon save (https://bugs.launchpad.net/evergreen/+bug/1976126[Bug 1976126])
254 * Fixes display issue with depth selector in patron note modal (https://bugs.launchpad.net/evergreen/+bug/1980874[Bug 1980874])
259 * Updates staff page headers to pass color-contrast checks (https://bugs.launchpad.net/evergreen/+bug/1994159[Bug 1994159])
260 * Allows combobox inputs to have IDs (https://bugs.launchpad.net/evergreen/+bug/1824709[Bug 1824709])
261 * Adds localization to Record Summary heading (https://bugs.launchpad.net/evergreen/+bug/1999446[Bug 1999446])
262 * Adds a user-visible error if a user attempts to login to the staff client without STAFF_LOGIN permissions (https://bugs.launchpad.net/evergreen/+bug/1969641[Bug 1969641])
263 * Fixes grid refresh issue on old Dojo grids (https://bugs.launchpad.net/evergreen/+bug/1625192[Bug 1625192])
266 ==== Course Materials ====
268 * User role options now show when typing in dropdown (https://bugs.launchpad.net/evergreen/+bug/1972928[Bug 1972928])
270 ==== Documentation ====
272 * Updates to Standing Penalties and Group Penalty Thresholds documentation
273 * Updates `create_release_notes.sh` to use asciidoctor formatting (https://bugs.launchpad.net/evergreen/+bug/1995653[Bug 1995653)]
274 * Adds Evergreen Web Services documentation
275 * Adds Mark Item as Missing Pieces documentation (https://bugs.launchpad.net/evergreen/+bug/1706664[Bug 1706664])
276 * Updates Server Installation documentation for current ng-build parameters (https://bugs.launchpad.net/evergreen/+bug/1863921[Bug 1863921])
277 * Updates Web Client Best Practices documentation
278 * Updates Describing Your Organization documentation
282 * Fixes a display error related to search term highlighting (https://bugs.launchpad.net/evergreen/+bug/1989133[Bug 1989133])
283 * Fixes Google Books preview (https://bugs.launchpad.net/evergreen/+bug/1955403[Bug 1955403])
284 * Fixes patron address alignment (https://bugs.launchpad.net/evergreen/+bug/1944602[Bug 1944602])
285 * Fixes button arrangement in MyAccount holds interface (https://bugs.launchpad.net/evergreen/+bug/1980275[Bug 1980275])
286 * Fixes alignment in publication year search filter fields (https://bugs.launchpad.net/evergreen/+bug/1974581[Bug 1974581])
287 * Fixes an issue with holds history pagination (https://bugs.launchpad.net/evergreen/+bug/1422927[Bug 1422927])
288 * Adds localization to sr-only, aria-label, and title fields (https://bugs.launchpad.net/evergreen/+bug/1992490[Bug 1992490])
289 * Fixes an error emailing records from the staff catalog & OPAC (https://bugs.launchpad.net/evergreen/+bug/1955079[Bug 1955079])
290 * Fixes display problem in 856 subfields $n, $z, and $3 (https://bugs.launchpad.net/evergreen/+bug/1966995[Bug 1966995])
291 * Fixes facet display issue in grouped record search results (https://bugs.launchpad.net/evergreen/+bug/1980304[Bug 1980304])
292 * Fixes small-screen display issue with navigation links in copy table (https://bugs.launchpad.net/evergreen/+bug/1983729[Bug 1983729])
293 * Fixes small-screen display issue with table displays (https://bugs.launchpad.net/evergreen/+bug/1984269[Bug 1984269])
294 * Corrects duplicate DOB display in patron self-registration form (https://bugs.launchpad.net/evergreen/+bug/1965065[Bug 1965065])
295 * Fixes display issue with applied filters (https://bugs.launchpad.net/evergreen/+bug/1980302[Bug 1980302])
296 * Fixes syntax error introduced in bug https://bugs.launchpad.net/evergreen/+bug/1992490[Bug 1992490] (https://bugs.launchpad.net/evergreen/+bug/2008925[Bug 2008925])
297 * Fixes styling of patron messages (https://bugs.launchpad.net/evergreen/+bug/1980142[Bug 1980142])
299 ==== Miscellaneous ====
301 * Fixes field order in New Survey modal (https://bugs.launchpad.net/evergreen/+bug/1991590[Bug 1991590])
302 * Changes Angular `styleext` setting to `style` (https://bugs.launchpad.net/evergreen/+bug/1995211[Bug 1995211])
306 * Fixes an error with display of certain shared reports folders (https://bugs.launchpad.net/evergreen/+bug/1999944[Bug 1999944])
308 === Acknowledgements ===
310 We would like to thank the following individuals who contributed code, testing, and documentation to the 3.9.2 point release of Evergreen:
324 * Blake Graham-Henderson
336 * Andrea Buntz Neiman
350 == Evergreen 3.9.1 ==
352 This release contains bug fixes improving on Evergreen 3.9.0.
354 === Upgrade notes ===
356 * https://bugs.launchpad.net/evergreen/+bug/1980409[Bug 18980409] introduces a new library setting - "Require call number labels in Copy Editor"
357 * https://bugs.launchpad.net/evergreen/+bug/1771636[Bug 1771636] introduces a workstation setting to show full library name in addition to library shortname
361 ==== Administration ====
363 * Fixes a memory leak when performing fleshed Fieldmapper search (https://bugs.launchpad.net/evergreen/+bug/1974195[Bug 1974195])
364 * No Holdings View Loaded For the Pre-cat Bib (https://bugs.launchpad.net/evergreen/+bug/1976557[Bug 1976557])
365 * Permission Groups editor now indicates when a permission overrides a parent permission (https://bugs.launchpad.net/evergreen/+bug/1891375[Bug 1891375])
366 * Adds sorting and filtering to the Circ Limit Sets interface (https://bugs.launchpad.net/evergreen/+bug/1945385[Bug 1945385])
367 * Blocks deletion of Shelving Locations that have items attached (https://bugs.launchpad.net/evergreen/+bug/1910546[Bug 1910546])
368 * Adds banner to Staff Portal Page (https://bugs.launchpad.net/evergreen/+bug/1974101[Bug 1974101])
369 * Fixes a display issue with Simple Reporter Field Groups (https://bugs.launchpad.net/evergreen/+bug/1978567[Bug 1978567])
370 * Fixes locale lookup in A/T event processing (https://bugs.launchpad.net/evergreen/+bug/1986479[Bug 1986479])
371 * Removes unvalid Z39.50 search attribute from LOC (https://bugs.launchpad.net/evergreen/+bug/1501870[Bug 1501870])
375 * Adds independent Org Unit Admin Scrolling for separate navigation of org unit tree and configuration form (https://bugs.launchpad.net/evergreen/+bug/1884950[Bug 1884950])
379 * Reduce parallel requests initiated by AngularJS holdings editor (https://bugs.launchpad.net/evergreen/+bug/1930617[Bug 1930617])
380 * Angular editor is now used when accessed from item status and item buckets (https://bugs.launchpad.net/evergreen/+bug/1956619[Bug 1956619])
381 * Holdings editor now enforcing required stat cats (https://bugs.launchpad.net/evergreen/+bug/1965448[Bug 1965448])
382 * Fixes an issue where creating new copy alerts / notes and item tags failed for brand
383 new copies (https://bugs.launchpad.net/evergreen/+bug/1959716[Bug 1959716])
384 * Fixes several bugs that prevent item notes from being correctly deleted by the Angular item attributes editor (https://bugs.launchpad.net/evergreen/+bug/1955065[Bug 1955065])
385 * Fixes a regression that required a call number label in order to save an item. A new library setting determines whether call number labels are required or not. (https://bugs.launchpad.net/evergreen/+bug/1980409[Bug 18980409])
386 * Fixes issue preventing creation of item alerts / notes and management of existing copies in the copy editor (https://bugs.launchpad.net/evergreen/+bug/1959716[Bug 1959716])
387 * Fixes several bugs that prevented item tags from being correctly deleted by the Angular item attributes editor (https://bugs.launchpad.net/evergreen/+bug/1981095[Bug 1981095])
388 * Fixes an issue where item alerts contained within copy templates failed to apply when using the new Angular holdings editor. (https://bugs.launchpad.net/evergreen/+bug/1956790[Bug 1956790])
389 * Improves the saving of holdings templates in the Angular holdings editor. (https://bugs.launchpad.net/evergreen/+bug/1957179[Bug 1957179])
390 * Fixes an issue where shelving locations for ancestor org units weren’t included in the shelving location drop down menu in the holdings editor. (https://bugs.launchpad.net/evergreen/+bug/1976002[Bug 1976002])
391 * Adds the full organizational unit path to the Copy Location Selector (https://bugs.launchpad.net/evergreen/+bug/1956627[Bug 1955627])
392 * Fixes an issue where item alert types did not display in the item attributes editor (https://bugs.launchpad.net/evergreen/+bug/1978889[Bug 1978889])
393 * Fixes an issue where creating item alerts would fail in the Angular item attributes editor (https://bugs.launchpad.net/evergreen/+bug/1956986[Bug 1956986])
395 ==== Circulation ====
397 * Fixes an issue where item alerts prevented hold capture when Hold Capture Delay Verification was used (https://bugs.launchpad.net/evergreen/+bug/1735221[Bug 1735221])
398 * Performance fix to add request serialization to Edit Due Date in Items Out tab (https://bugs.launchpad.net/evergreen/+bug/1932203[Bug 1932203])
399 * Fixes Holds Pull List to show Library Shortnames instead of Library IDs in Requesting Library and Selecting Library columns (https://bugs.launchpad.net/evergreen/+bug/1978839[Bug 1978839])
400 * On the Holds Shelf the “User Display Name” and “User Alias or Display Name” fields will now use the preferred name if present. (https://bugs.launchpad.net/evergreen/+bug/1838553[Bug 1838553])
401 * Adds manual refresh for patron penalties (https://bugs.launchpad.net/evergreen/+bug/1823225[Bug 1823225])
402 * Adds a missing patron-visibility flag to messages created for the patron message center by notification action triggers (https://bugs.launchpad.net/evergreen/+bug/1958573[Bug 1958573])
403 * Fixes a typo on the Holds Details screen of View Holds (https://bugs.launchpad.net/evergreen/+bug/1979099[Bug 1979099])
404 * Fixes issues with printing from Angular. The option to print landscape is restored and the size of the text is no longer scaled down. This affected printing of the Holds Pull List. (https://bugs.launchpad.net/evergreen/+bug/1986725[Bug 1986725])
405 * Fixes the patron print bills page label from select "items" to select "copies (https://bugs.launchpad.net/evergreen/+bug/1980692[Bug 1980692])
409 * Fixes an issue where Angular comboboxes would attempt to fetch all rows from a linked table (https://bugs.launchpad.net/evergreen/+bug/1851884[Bug 1851884])
410 * Adds a workstation setting to show full library name in addition to library shortname (https://bugs.launchpad.net/evergreen/+bug/1771636[Bug 1771636])
411 * Fixes an issue with SSO Shibboleth logout and re-login. (https://bugs.launchpad.net/evergreen/+bug/1989209[Bug 1989209])
412 * Fixes an issue where the shelving location selector didn’t work in several interfaces including adding course materials, circulation limit sets, and distribution formulas in acquisitions. (https://bugs.launchpad.net/evergreen/+bug/1980887[Bug 1980887])
413 * Fixes issue with inactive button pointer (https://bugs.launchpad.net/evergreen/+bug/1953381[LP 1953381])
415 ==== Course Materials ====
417 * Adds a user visible warning when deleting a Term linked to Courses (https://bugs.launchpad.net/evergreen/+bug/1942647[Bug 1942647])
418 * Fixes an issue where the carriage return activated the Add Materials and Add User buttons (https://bugs.launchpad.net/evergreen/+bug/1930896[Bug 1930896])
419 * Fixes a display issue where the updated call number is not reflected in the grid when adding materials to courses. (https://bugs.launchpad.net/evergreen/+bug/1907974[Bug 1907974])
420 * Fixes an issue with archiving Courses (https://bugs.launchpad.net/evergreen/+bug/1939994[Bug 1939994])
421 * Items removed from a Course will now revert to their original call number owning library (https://bugs.launchpad.net/evergreen/+bug/1939730[Bug 1939730])
422 * Now alerts when attempting to associate materials from a library different from the course's library (https://bugs.launchpad.net/evergreen/+bug/1913604[Bug 1913604])
423 * Fix issue where archiving a course removed materials from other courses (https://bugs.launchpad.net/evergreen/+bug/1993922[Bug 1993922])
425 ==== Documentation ====
427 * Updates to Carousels documentation (https://bugs.launchpad.net/evergreen/+bug/1901895[Bug 1901895])
428 * Adds Staff Portal Page documentation
429 * Adds Cover Image Upload documentation
430 * Adds Alternate Notice Templates documentation
431 * Updates to Holds Management documentation
432 * Updates to Authorities documentation
433 * Adds Group Penalty Thresholds documentation
434 * Updates to Carousels documentation
435 * Updates to My Account documentation
436 * Adds Global Flags documentation
440 * Fixes formatting in Current Holds Group table in MyAccount (Bootstrap OPAC) (https://bugs.launchpad.net/evergreen/+bug/1950345[Bug 1950345])
441 * Fixes formatting in Holds Groups Table in MyAccount (TPAC) (https://bugs.launchpad.net/evergreen/+bug/1950514[Bug 1950514])
442 * If DOB is marked required, blocks self-registration form from submitting with a blank DOB (https://bugs.launchpad.net/evergreen/+bug/1950166[Bug 1950166])
443 * Fixes an issue where DOB field would auto populate with the current date (https://bugs.launchpad.net/evergreen/+bug/1951642[Bug 1951642])
444 * Adds a missing patron-visibility flag to messages created for the patron message center by notification action triggers (https://bugs.launchpad.net/evergreen/+bug/1958573[Bug 1958573])
445 * Fixes an issue where payments made in the OPAC via Stripe were not credited in Evergreen for circulation bills as well as making minor display tweaks to Bootstrap. (https://bugs.launchpad.net/evergreen/+bug/1981628[Bug 1981628])
446 * Fixes an issue where payments made in the OPAC via Stripe were not credited in Evergreen when patrons had negative bills (https://bugs.launchpad.net/evergreen/+bug/1965579[Bug 196557])
447 * Fixes an issue in Bootstrap where list titles and descriptions couldn’t be edited. (https://bugs.launchpad.net/evergreen/+bug/1909583[Bug 1909583])
448 * Restores the ability to update existing holds if a patron changes certain notification preferences or contact information. Evergreen will detect these changes and ask ther patron if they want to update existing holds with the new contact information and/or notification preferences. (https://bugs.launchpad.net/evergreen/+bug/1902272[Bug 1902272])
449 * Lengthy titles in OPAC CArousels are now truncated in display (https://bugs.launchpad.net/evergreen/+bug/1979080[Bug 1979080])
450 * Fixes cover alignment issue in OPAC search results (https://bugs.launchpad.net/evergreen/+bug/1920268[Bug 1920268])
451 * Fixes inconsistent wording in My Account pages (https://bugs.launchpad.net/evergreen/+bug/1983129[Bug 1983129])
452 * Other Formats and Editions now displays more prominently in Bootstrap. (https://bugs.launchpad.net/evergreen/+bug/1903767[Bug 1903767])
453 * Fixes an issue in Bootstrap where the headers in advanced search couldn’t be translated. (https://bugs.launchpad.net/evergreen/+bug/1991395[Bug 1991395])
454 * Fixes formatting in Booking Reservations page in the Bootstrap OPAC (https://bugs.launchpad.net/evergreen/+bug/1980297[Bug 1980297])
455 * Fix Add to Bucket (from Basket) action in the Bootstrap OPAC (https://bugs.launchpad.net/evergreen/+bug/1898775[Bug 1898775])
457 ==== Miscellaneous ====
459 * Adds ng lint to github actions (https://bugs.launchpad.net/evergreen/+bug/1978049[Bug 1978049])
460 * Cleans up 'Build Docs' artifacts in github actions (https://bugs.launchpad.net/evergreen/+bug/1991444[Bug 1991444])
461 * Fix issue exporting strings from the Angular client for translation (https://bugs.launchpad.net/evergreen/+bug/1993534[Bug 1993534])
462 * Fix issue where Did You Mean was breaking parallel reingest and record overlay (https://bugs.launchpad.net/evergreen/+bug/1931737[Bug 1931737])
463 * Fix applying Czech translation to the Angular staff client (https://bugs.launchpad.net/evergreen/+bug/1982887[Bug 1982887])
465 === Acknowledgements ===
467 We would like to thank the following individuals who contributed code,
468 testing, and documentation to the 3.9.1 point release of Evergreen:
491 * Andrea Buntz Neiman
492 * New Developers Working Group
504 == Evergreen 3.9.0 ==
506 === Upgrade notes ===
508 ==== New Permissions ====
511 * ADMIN_STAFF_PORTAL_PAGE
514 ==== New Library Settings ====
516 * Custom jQuery for the OPAC
520 ==== Administration ====
522 ===== Localized Templates Available for Action Triggers =====
524 This feature supplies the ability to create alternate templates for Action Triggers
525 that will generate locale specific out for Action Triggers. If you send notices in
526 multiple languages, we recommend putting some words to that effect in your notice
527 templates. The template, message and message title can all be localized. To use the
528 feature the following new UI elements have been added:
530 - When you double-click on an Event Definition under Notifications / Action Triggers
531 to edit it there will be a tab option for Edit Alternate Template if the reactor is
532 ProcessTemplate, SendEmail or SendSMS.
533 - In the Patron Registration and Patron Editor screens staff members may now select a
534 locale for a patron and edit it in the Patron Preferred Language field.
535 - Patrons may set their own locale in the My Account interface off the OPAC by going to
536 Preferences -> Personal Information and setting the Preferred Language field.
538 The templates used on the Edit Definition tab are the defaults that are used if there are
539 no alternate templates available that match the preferred language. If alternate templates
540 are available the system will use a locale that is an exact match and then if failing that
541 use one where the language code matches and then fall back to the default one.
543 For example, if a patron has a locale of fr-CA and there are templates for both fr-CA and
544 fr-FR it will use the fr-CA. If the fr-CA template was deleted it would fall back on using
545 the fr-FR for the patron since it at least shares the same base language.
547 Valid locales are the codes defined in the i18n_locale table in the config schema.
549 ===== Staged Search Tables and Functions Removed from Database =====
551 This release removes the asset.opac_visible_copies materialized view and
552 search.query_parser_fts function from the Evergreen database. They have been
553 obsolete since staged search was eliminated in Evergreen 3.0. Any custom code
554 that relies on them should be updated accordingly.
558 ===== array_accum Aggregate Removed =====
560 The custom `array_accum` aggregate function has been removed from the
561 PostgreSQL database because it will need to be dropped and recreated
562 with a different definition when upgrading to PostgreSQL version 14 or
563 later. Its functionality is also redundant with PostgreSQL's own
564 `array_agg` function.
566 Sites that have custom code using Evergreen's `array_accum` function
567 should alter their code to use `array_agg` instead.
569 ===== Removal of OpenILS::Utils::ISBN =====
571 Evergreen used to include a perl module called OpenILS::Utils::ISBN.
572 This module provided a single subroutine, `isbn_upconvert`, which
573 wrapped some behavior from the Business::ISBN module. The module
574 is no longer used in Evergreen code. Any custom code that used it
575 should be migrated to use Business::ISBN directly.
579 ===== Custom Cover Image Uploader =====
581 If configured for a given Evergreen instance, staff with the UPLOAD_COVER_IMAGE
582 permission may upload a custom jacket/cover image for a given bibliographic
583 record for display in the staff client and OPAC. This is done through the Other
584 Actions -> Upload Cover Image command from the record details page in the staff
587 ====== Note for system administrators ======
589 The following stanza needs to be added to eg_vhost.conf:
592 ----------------------------------------------------------------
593 <Location /jacket-upload>
594 SetHandler perl-script
595 PerlHandler OpenILS::WWW::Vandelay::spool_jacket
599 ----------------------------------------------------------------
601 and this to the open-ils.vandelay -> app_settings -> databases section of
605 ----------------------------------------------------------------
606 <jackets>/openils/var/web/opac/extras/ac</jackets>
607 ----------------------------------------------------------------
609 with the path appropriately adjusted for your installation. The Apache process
610 will need write permissions for that directory.
612 Additionally, the following directories need to exist and be writable by the Apache process:
614 /openils/var/web/opac/extras/ac/jacket/large/r
615 /openils/var/web/opac/extras/ac/jacket/medium/r
616 /openils/var/web/opac/extras/ac/jacket/small/r
618 ==== Circulation ====
620 ===== Copy Inventory Date Improvements =====
622 This release fixes two bugs with copy inventory dates:
624 * https://bugs.launchpad.net/evergreen/+bug/1883171[duplicate entries for a copy in asset.latest_inventory table]
625 * https://bugs.launchpad.net/evergreen/+bug/1940663[Staff users can update inventory dates on non-owned items]
627 In addition to fixing the above bugs, improvements are made to the implementation of the latest copy inventory feature so that it may be further expanded in the future.
629 ====== Technical Details for Developers and System Administrators ======
631 The following changes are made to the database, back end, and staff client user interface code:
633 * The data moves to a new table in the database, `asset.copy_inventory`.
634 * The new data table is accessible via a new Fieldmapper object, `aci`.
635 * The new data table has appropriate foreign keys and triggers to ensure data integrity and prevent duplicate entries.
636 * The old data table, `asset.latest_inventory`, is now a view on the new table.
637 * The Fieldmapper object `alci` is now read-only.
638 * The `open-ils.circ.circulation.update_copy_inventory` method replaces the `open-ils.circ.circulation.update_latest_inventory` method.
639 * The `open-ils.circ.circulation.update_copy_inventory` method inserts into the `asset.copy_inventory` table.
640 * The `open-ils.circ.circulation.update_latest_inventory` method is removed.
641 * The Item Status screen now uses `open-ils.circ.circulation.update_copy_inventory` to update a copy's inventory date.
642 * The staff client Item Status screen now toasts success or failure as appropriate. It previously only toasted success.
643 * ngToast has also been added for a single record view in the Item Status screen. This means that toasts can be added for other events.
644 * The circulation back end code inserts into the `asset.copy_inventory` table when the do inventory modifier is used at check in.
645 * An `asset.copy_inventory` entry is only added if the copy is at its "home," or owning, library or if the copy can float to the library where the inventory is being updated.
646 * A Perl live test is added to verify back end functionality.
647 * Pgtap tests are added to verify the schema and to verify database functionality.
649 The following items remain unchanged:
651 * The staff interface to add/update copy inventory dates remains the same:
652 ** the Update Inventory option on the Checkin Modifiers menu
653 ** the Update Inventory command on the Item Status Actions menu.
654 * The staff client's Circulation and Item Status screens display data from the `alci` view object.
655 * The `alci` object looks the same, so reports based on it should still work.
657 The motivation behind the changes beyond simply fixing the two bugs listed above is to allow for possible future expansion of the copy inventory feature. The new table makes it easier to add new fields and to track inventory updates of a given copy over time. While these changes do not constitute an inventory module, they should ease the implementation of such a module and assist in the preservation of the current data.
661 ===== Customizable Staff Portal =====
663 The staff portal / staff home page is now customizable. A new Local
664 Administration interface, Staff Portal Page, allows staff users who
665 have the new `ADMIN_STAFF_PORTAL_PAGE` permission to specify groups
666 of Evergreen menu links, external links, catalog search widgets,
667 and free text to display on the staff home page.
669 The portal customization is available only on the Angular version of
670 the portal, so access to the AngularJS version is now redirected to
673 Different portal pages may be configured for different Organizational
674 Units. The displayed portal page will depend on the staff user's
675 workstation. The Organizational Unit tree will be walked up starting
676 from the workstation until one or more `config.ui_staff_splash_page_entry`
677 rows are found for the Organizational Unit. The set of entries for
678 that Organizational Unit will constitute the entire splash page entries
679 to display, i.e., it won't try to merge branch, system, and
680 consortial-level entries.
682 The administration interface allows authorized to:
684 * create, modify, or delete portal page entries
685 * clone a library's set of portal page entries to a different library
687 Portal page entries consist of the following fields:
689 * Entry Label: free text that displays on the portal page
690 * Entry Type: Catalog Search, Header, Link, Menu Item, or Text and/or HTML
691 * Entry Target URL: target of Link or Menu Item entries
692 * Entry Text: Free text and limited HTML to display for Text/HTML entry types. HTML is sanitized to allow only basic formatting and link elements.
693 * Entry Image URL: for specifying an icon to display with the portral entry.
694 * Owner: the Organization Unit that owns the entry.
695 * Page Column and Column Position: these control the positioning of the entry. The portal is styled so that three columns are displayed by default, as with the legacy hard-coded portal, but if the user chooses to define more than three columns, columns after the third will stack vertically as additional rows.
697 ====== Upgrade notes ======
699 This patch adds the following:
701 * New database table `config.ui_staff_splash_page_entry`. This stories the entries to display on the portal.
702 * New database table `config.ui_staff_portal_page_entry_type`. This is a lookup table for entry types.
703 * New permission `ADMIN_STAFF_PORTAL_PAGE`. This is implicitly available to stock Local and Global Administrator permission groups via the `EVERYTHING` permission.
704 * New grid setting for the administration interface.
707 ===== Org Selector Now Supports Entry Styling =====
709 The Org Selector now supports the ability to pass in an object composed of
710 an array of Org Unit IDs and a function returning a CSS key value pair.
714 ===== OAI-PMH Data Provider Support =====
716 Evergreen can now act as an OAI-PMH data provider, exposing the catalog to
717 harvesting through the (https://www.openarchives.org/OAI/openarchivesprotocol.html[OAI2 protocol]).
723 There are two: one for bibliographic records and one for authority records:
725 http://your-domain/opac/extras/oai/authority
726 http://your-domain/opac/extras/oai/biblio
728 An example of a working URL on a system with an authority record with ID
731 http://your-domain/opac/extras/oai/authority?verb=GetRecord&identifier=oai:localhost:1&metadataPrefix=oai_dc
733 Setspec are not implemented
734 +++++++++++++++++++++++++++
736 This is a work in progress and not enabled. The aim is to have the owning library determine the set hierarchy. The Concerto
737 test database for example has a record with record ID #1. This record is so popular it has copies attached to library units
738 "Example Branch 1", "Example Branch 2", "Example Branch 3", "Example Bookmobile 1" which is a child of Branch 3 and
739 "Example Branch 4". This entire kinship is expressed as sets like so:
745 <setSpec>CONS</setSpec>
746 <setSpec>CONS:SYS1</setSpec>
747 <setSpec>CONS:SYS2</setSpec>
748 <setSpec>CONS:SYS1:BR1</setSpec>
749 <setSpec>CONS:SYS1:BR2</setSpec>
750 <setSpec>CONS:SYS2:BR3</setSpec>
751 <setSpec>CONS:SYS2:BR4</setSpec>
752 <setSpec>CONS:SYS2:BR3:BM1</setSpec>
756 Likewise the setSpecs of authority records are derived from their browse axis ( Title, Author, Subject and Topic ).
758 Bibliographic mapping of assets to 852 subfields
759 ++++++++++++++++++++++++++++++++++++++++++++++++
761 Certain attributes asset are placed into 852 subfields so:
764 | subfield code | asset resource
774 Thus the Concerto with record ID #1 will have it's 852 subfields expressed as:
778 <marc:datafield ind1="4" ind2=" " tag="852">
779 <marc:subfield code="a">Stacks</marc:subfield>
780 <marc:subfield code="b">BR4</marc:subfield>
781 <marc:subfield code="c">ML 60 R100</marc:subfield>
782 <marc:subfield code="d">BR4</marc:subfield>
783 <marc:subfield code="g">CONC70000435</marc:subfield>
784 <marc:subfield code="n">Checked out</marc:subfield>
788 This mapping can be customized and extended with static subfields:
792 <marc:subfield code="q">A constant value</marc:subfield>
795 Default configuration
796 +++++++++++++++++++++
798 See comments in opensrf.xml (in the open-ils.supercat app_settings/oai element)
799 for default configuration and customization instructions.
803 OAI support is not turned on by default. To enable it, edit the Apache
804 configuration file `eg_vhost.conf` to uncomment the following
805 section and restart Apache:
809 #<Location /opac/extras/oai>
810 # SetHandler perl-script
811 # PerlHandler OpenILS::WWW::SuperCat::OAI
814 # Require all granted
820 ===== jQuery OPAC Library Setting =====
822 A new setting entitled opac.patron.custom_jquery has been added to library settings. Using this does require that the ctx.want_jquery be uncommented and set to 1 (true) in the opac/parts/config.tt2 file. Using this setting will allow OPACs to run jQuery without customizing server side templates. For example adding the following:
824 $(document).ready(function(){ $("a:contains(Link 2)").text('Kafka'); });
826 Will change the text of 'Link 2' in the link bar to say 'Kafka'. See the Evergreen WIKI (https://wiki.evergreen-ils.org/) for examples.
830 ===== Simple Reports =====
832 This release includes a new Simple Reports reporting system focused on ease of
833 use and simplicity that is available from the Administration menu of the
834 staff client. Simple Reports can be restricted by staff permissions and
835 access to the overall feature is granted through a new RUN_SIMPLE_REPORTS
838 The Simple Reports interface is intended to provide an alternate access point
839 for running reports in Evergreen and is not intended to replace the main
840 Reports interface. In particular, users in need of complex reports should
841 still make use of the main Reports interface.
843 To simplify report creation some fields are generated from multiple backend
844 fields and other fields such as dates are repeated with multiple transforms
845 pre-applied. Reports and schedules can be edited at any time as needed.
849 ===== Adding Captured Hold Phone Notification Number to Checkin Response =====
851 Some third party systems can phone users when a SIP checkin captures
852 an item they have on hold. Normally, to do this a patron information
853 request is sent (message pair 63/64), but some systems will only look
854 for it in the reply to the Checkin pair, 09/10. Because this is not
855 a part of the SIP2 standard and exposes patron personal information
856 when used indescriminately, it must be enabled by including the key
857 `<phone_ext_on_msg10 enabled="true" />` in the "institution"
858 section of `oils_sip.xml`.
860 ===== Upgrade Note =====
862 To use this feature, Evergreen administrators should upgrade to the
863 latest version of `SIPServer`.
865 ==== Miscellaneous ====
867 * The patron record juvenile flag is now available to the checkout and
868 items out print templates. (https://bugs.launchpad.net/evergreen/+bug/1830387[Bug 1830387])
869 * The Notices / Action Triggers administration interface (under Local
870 Administration) is ported to Angular. (https://bugs.launchpad.net/evergreen/+bug/1855780[Bug 1855780])
871 * The Local Administration interface Shelving Location Order Editor is ported to Angular https://bugs.launchpad.net/evergreen/+bug/1846552[Bug 1846552])
872 * Series Title is now a column option in the Holds Pull List (https://bugs.launchpad.net/evergreen/+bug/1863196[Bug 1863196])
873 * Credit card payment approval code is now available to the Payment Receipt template (https://bugs.launchpad.net/evergreen/+bug/1865062[Bug 1865062])
874 * There is a new widget to share a Carousel on an external site (https://bugs.launchpad.net/evergreen/+bug/1882982[Bug 1882982])
875 * Item Status Circ History now includes original checkout workstation and staff (https://bugs.launchpad.net/evergreen/+bug/1919500[Bug 1919500])
876 * The 520 Summary field is now more prominently displayed in the Bootstrap OPAC (https://bugs.launchpad.net/evergreen/+bug/1930614[Bug1930614])
877 * It is now easier to customize the Boostrap OPAC topnav logo (https://bugs.launchpad.net/evergreen/+bug/1964963[Bug 1964963])
878 * Improvements to Angular grid 'copy to clipboard' dialog (https://bugs.launchpad.net/evergreen/+bug/1958581[Bug 1958581])
879 * Patron Notes now include Creation Date/Time and default to sorting by most recent created note (https://bugs.launchpad.net/evergreen/+bug/1956970[Bug 1956970])
880 * 'Due date' field is now available under Show More Details in staff catalog search results (https://bugs.launchpad.net/evergreen/+bug/1955931[Bug 1955931])
881 * Staff can add jQuery code in to a Library Setting to perform simple OPAC customizations (https://bugs.launchpad.net/evergreen/+bug/1849113[Bug 1849113])
882 * Added API call to allow external carousel display (https://bugs.launchpad.net/evergreen/+bug/1951318[Bug 1951318])
888 The Evergreen project would like to acknowledge the following
889 organizations that commissioned developments in this release of
893 * Equinox Open Library Initiative
895 * Linn-Benton Community College
898 * Pioneer Library System
900 We would also like to thank the following individuals who contributed
901 code, translations, documentations patches and tests to this release of
915 * Blake Graham Henderson
924 * Andrea Buntz Neiman
936 We also thank the following organizations whose employees contributed
944 * Equinox Open Library Initiative
945 * Georgia Public Library Service
946 * Greater Clarks Hill Regional Library
947 * Indiana State Library
948 * International Institute of Social History
949 * Kenton County Library
950 * King County Library System
951 * Lake Agassiz Regional Library
952 * Linn Benton Communit College
957 * Westchester Library System
959 We regret any omissions. If a contributor has been inadvertently
960 missed, please open a bug at http://bugs.launchpad.net/evergreen/