Correct small errors in new AC cover code

In shelf browser, two problems:
 - missing '%]' after 'args=rec_attrs;'
 - cn.record_id should be cn.record.id

Signed-off-by: Dan Wells <dbw2@calvin.edu>
Signed-off-by: Ben Shum <bshum@biblio.org>
Responsive tpac release notes

Add release notes entry for the recent responsive tpac work.

Signed-off-by: Kathy Lussier <klussier@masslnc.org>
Fix an omission in the log redaction configuration.

open-ils.actor.patron.password_reset.commit was omitted in the
<log_protect> block of opensrf_core.xml.example.  This commit adds
it and updates the release notes for 2.3 to include it.

There is also a release notes file informing users that they need to
edit opensrf_core.xml to address this issue.

Signed-off-by: Jason Stephenson <jstephenson@mvlc.org>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Bill Erickson <berick@esilibrary.com>
LP#1066141: add authtoken check and related permission for age to lost function

The SET_CIRC_LOST permission is now required in order to invoke
the open-ils.circ.circulation.age_to_lost method.

Signed-off-by: Ben Shum <bshum@biblio.org>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Bill Erickson <berick@esilibrary.com>
LP#1207281 Prevent download of offline patron list without authentication

This patch addresses the vulnerability which allowed a user with the proper
knowledge of the location of offline patron lists to download the file over
regular HTTP without any staff credentials.

This small addition to eg_vhost.conf.in will present users with a login prompt
when trying to access the /standalone/ subdirectory on an Evergreen server.

Users are able to download the patron list in the staff client as normal
because they already have obtained credentials during the normal staff client
authentication process.

Signed-off-by: Michael Peters <mpeters@emeralddata.net>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Bill Erickson <berick@esilibrary.com>
LP#1207281: require SSL when downloading offline patron list

This patch builds on the previous one by forcing use of
SSL for downloading the offline patron list.  It also
updates the Apache 2.4 example configuration.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Bill Erickson <berick@esilibrary.com>
Documentation: Add migrating patron data from 2.1 docs.

Converted and added documentation from http://docs.evergreen-ils.org/2.1/html/migratingpatrons.html.

Signed-off-by: Robert Soulliere <robert.soulliere@mohawkcollege.ca>
Move various release notes into correct directory

Signed-off-by: Kathy Lussier <klussier@masslnc.org>
Adding new OPAC features to Release Notes.

Signed-off-by: Kathy Lussier <klussier@masslnc.org>
Release note additions for new acquisitions features

Signed-off-by: Kathy Lussier <klussier@masslnc.org>
More release note entries

Additional release note entries in the areas of administration,
circulation, staff client, SIP, and serials.

Signed-off-by: Kathy Lussier <klussier@masslnc.org>
Relax MFHD subfield 'a' requirement for caption/patterns

If going by the book, every caption/pattern field would have a
subfield 'a', since the data from subfield 'i' would be moved to
'a' if 'a' was empty.  Since that is arcane, and our own wizards
used to bend this rule, let's make some minor adjustments to our
expectations:

1) When calculating date progression, don't expect there to be an 'a'
subfield which needs to be "carried" into.
2) When determining whether a field is 'open-ended', check the first
availabile enum/chron subfield rather than hard-coding the check to
'a'.

These changes do not affect the display formatters, so strings
generated from 'a'-less caption/pattern combos are not exactly right,
but they suffice.

Signed-off-by: Dan Wells <dbw2@calvin.edu>
Signed-off-by: Ben Shum <bshum@biblio.org>
Move some release notes to core docs

The release notes for Phonelist.pm and floating groups provided some good
documentation, so let's move them to the core docs and leave just the
intro for the release notes.

Signed-off-by: Kathy Lussier <klussier@masslnc.org>
Remove unnecessary Title Proper (Browse) index from config.metabib_field

As pointed out by Ben Shum and Dan Wells, we don't need this index, and
it made it only into the seed data and not into any upgrade script in
master.  It's a relic of bib-and-auth-browse development that ought to
have been removed before the merge to master.

Signed-off-by: Lebbeous Fogle-Weekley <lebbeous@esilibrary.com>
Signed-off-by: Dan Wells <dbw2@calvin.edu>