[Koha-bugs] [Bug 33606] Access to ERM requires parameters => 'manage_sysprefs'

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33606

--- Comment #5 from Tomás Cohen Arazi <tomascohen at gmail.com> ---
I feel like we either (a) refactor everything and do server-side rendering as
we do now with Template::Toolkit, or (b) provide a way to fetch the module
configuration, as the patch proposes.

I think (a) is not doable or worth. So I pick (b).

I generally agree with an endpoint like /config/:module_name for retrieving
things.
I'd prefer we come up with something more generic than just passing the
allow-listed sysprefs. We could talk about allowed-to-use features like:

{
    features: {
        packages: [ add, update, delete, list ]
    }
}

If we look at our current approach (C4::Auth) it is easy to spot that we also
add information about the permissions the current user has (CAN_<permission>).

I'm not sure about the data structure. We should just copy what other projects
do.

-- 
You are receiving this mail because:
You are watching all bug changes.