April 6, 2021

Errant requests discovered

We've just become aware of a software bug that allowed patrons who are not logged in to create requests, even patrons of libraries that do not have patron-initiated ILL requesting enabled. It appears this was happening from late December to the end of March. Because of the bug, the Request button continues to display in the list view of search results even for users who aren't logged in. While Auto-Graphics works on a fix, we've changed settings so anyone who is not logged in and clicks the Request button will immediately be prompted for a login. For libraries that allow patron-initiated requesting, the login should authenticate and users can proceed as usual to create a request. For libraries that don't allow patron-initiated requesting, users won't be able to get past the login screen.

Please check for requests in Awaiting Approval status in the top left corner of the Request Manager screen. This is where you'll find any requests that were created by patrons while using the library-specific URL for the NHAIS ILL System that includes your HSA code. (You'll also find staff-created requests for items that the ILL system thinks you already own here.)

For requests in Awaiting Approval status you have the following choices:

Approved - Send -- The status changes to Pending and the request immediately begins working its way down the lender list (but be sure to check the need-by date before submitting--it may need to changed or the request may become Expired as soon as it's submitted) 

Cancel -- The status changes to Cancelled and you need do nothing further

Delete -- The request is flagged for deletion, which will happen during overnight processing

It's evident that many of the requests were placed with the NHAIS default URL rather than a library-specific URL and NHAIS Services staff is working through these requests. They cannot be approved as is because there's no local library associated with them so...

  • If the patron provided an e-mail address we will be sending them a message telling them about the bug and asking them to contact their local library to place an ILL request. In many cases we can't tell what library the person "belongs" to as only an e-mail address was provided.
  • If there is no patron e-mail address on the request but a library can be identified we will send to the library's ILL contact the info we have about who the patron was so that library can follow up with the patron if desired.
  • If no e-mail or library info is included in the request we will not be able to let the patron know what's happened. We suggest that on May 1 (by which time we will have contacted everyone we can) libraries may want to make a general statement to their patrons: "The statewide interlibrary loan system recently discovered a bug that allowed unidentified patrons to place requests. These requests could not be processed. If you placed a request directly in the system and never heard back from us about it yours may have been one of these. Please contact [your ILL contact] and we will assist you in placing your request."

[This post edited 1/16/24 to update a link.]


No comments:

Post a Comment

Comments on this blog are welcome, but they are moderated. Signed comments that we feel make a positive contribution to the discussion will be posted.