[Koha-bugs] [Bug 23517] Incorrect permission requirements for holds operations via the API

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23517 --- Comment #1 from Tomás Cohen Arazi <tomascohen@gmail.com> --- Owen, would you say we should better redefine the holds permissions in a more fine-grained way and then adjust the API to reflect that? Hm, maybe we can set 'priority' as read-only and change 'reserveforothers' for 'place_holds' for the first problem. And for the second one, add a new endpoint like PUT /holds/:hold_id/priority requiring the 'modify_holds_priority'. What do you think? -- You are receiving this mail because: You are watching all bug changes.