[Koha-bugs] [Bug 33606] Access to ERM requires parameters => 'manage_sysprefs'

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33606

--- Comment #50 from Katrin Fischer <katrin.fischer at bsz-bw.de> ---
(In reply to Jonathan Druart from comment #49)
> (In reply to Jonathan Druart from comment #48)
> > (In reply to Katrin Fischer from comment #47)
> > > Why is there no test plan on this bug report?
> > > 
> > > * Checked out the remote branch
> > > https://gitlab.com/joubu/Koha/-/commits/bug_33606-23.05
> > > * Rebased on latest 23.05.x
> > > * yarn build & restart_all
> > > * ERMModule, ERMProviders EBSCO and Local activated
> > > * As superlibrarian
> > >   * Verified all pages are accessible and look as expected
> > >   * Fixed missing FA icons in navigation (see follow-up)
> > > * Create a user with limited permissions: only ERM, catatalogue
> > >   On accessing the ERM module I see:
> > >    Something went wrong: Error: Authorization failure. Missing required   
> > > permission(s).
> > > *  Added borrowers permission: same error
> > > *  Added manage_sysprefs: same error
> > > 
> > > I don't know if I tested wrong or if this needs more work. I'll attach my
> > > follow up patch for the icons to bug 33169. Jonathan, maybe you could add it
> > > to the branch?
> > 
> > It's getting 403 on /vendors. Add permission acquisition: vendors_manage.
> > If you think it's a bug, open a separate bug report ;)
> 
> ie. certainly the same behaviour on master.

It's bug 32971. But I think vendor_manage is much better than needing
manage_sysprefs. Adding vendor_manage fixed my problems and now my 'permission
restricted' user can use the ERM module.

How should we proceed, do you want to add my follow-up to your branch? Or
should I try and attach the patch sets for 23.05 to both bugs?

-- 
You are receiving this mail because:
You are watching all bug changes.