[Koha-bugs] [Bug 33993] The GET orders endpoint needs to allow users with order_receive permission

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33993

Lucas Gass <lucas at bywatersolutions.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |lucas at bywatersolutions.com

--- Comment #2 from Lucas Gass <lucas at bywatersolutions.com> ---
I am testing using this plan:

1. Have a user with just the 'order_recieve' permission. Log in, or use
PostMan, to hit '/api/v1/acquisitions/orders/'.
2. You don't have permission to view the page
3. Give the user the 'order_recieve' permission. Hit
'/api/v1/acquisitions/orders/'. Now you should see the response.

-- 
You are receiving this mail because:
You are watching all bug changes.