[Koha-bugs] [Bug 33993] New: The GET orders endpoint needs to allow users with order_receive permission

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33993

            Bug ID: 33993
           Summary: The GET orders endpoint needs to allow users with
                    order_receive permission
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Acquisitions
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: martin.renvoize at ptfs-europe.com
        QA Contact: testopia at bugs.koha-community.org

We're now using the API for loading orders in the order receive page. As such,
we need to allow the GET orders endpoint to function with that permission too.

We have customers where they restrict staff to either 'ordering' or 'receiving'
using permissions.. as we require 'order_manage' or 'order_manage_all' their
users with just 'order_recieve' get a 403 when the orders table attempts to
load on receive pages.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.