[Koha-bugs] [Bug 35967] REST API: Add /api/v1/patrons/{patron_id}/recalls endpoint to list patron's recalls

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35967

--- Comment #1 from Aleisha Amohia <aleisha at catalyst.net.nz> ---
Created attachment 161708
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=161708&action=edit
Bug 35967: Add REST API endpoint to list patron recalls

This enhancement adds a REST API endpoint to list a patron's recalls:

/api/v1/patrons/{patron_id}/recalls

This depends on the logged in patron having the manage_recalls subpermission.

To test:

1. Log in to the staff interface as your superlibrarian self (Patron A)
2. Go to Koha Administration -> Global system preferences. Enable the
UseRecalls system preference
3. Set the relevant recalls circulation and fines rules
4. Search for an item (Item A)
5. Check out Item A to yourself (Patron A)
6. Log in to the OPAC as Patron B, a patron who does not have the
manage_recalls permission
7. Search for Item A and request a recall
8. While still logged in to the OPAC as Patron B, hit this URL:
https://your-opac-url/api/v1/patrons/patron-b-borrowernumber/recalls (swap out
your URL and Patron B's borrowernumber)
9. Confirm you are given an error: "Authorization failure. Missing required
permission(s)."
10. Log out of the OPAC and log back in, this time as Patron A
11. Hit the URL again
https://your-opac-url/api/v1/patrons/patron-b-borrowernumber/recalls
12. Confirm you are able to view a list of Patron B's recalls
13. Confirm tests pass: t/db_dependent/api/v1/patrons_recalls.t

Sponsored-by: Auckland University of Technology

-- 
You are receiving this mail because:
You are watching all bug changes.