https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33993 Bug ID: 33993 Summary: The GET orders endpoint needs to allow users with order_receive permission Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs@lists.koha-community.org Reporter: martin.renvoize@ptfs-europe.com QA Contact: testopia@bugs.koha-community.org We're now using the API for loading orders in the order receive page. As such, we need to allow the GET orders endpoint to function with that permission too. We have customers where they restrict staff to either 'ordering' or 'receiving' using permissions.. as we require 'order_manage' or 'order_manage_all' their users with just 'order_recieve' get a 403 when the orders table attempts to load on receive pages. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.