https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40912 Bug ID: 40912 Summary: Receive shipments button requires full acquisitions permissions not just order_receive Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Acquisitions Assignee: koha-bugs@lists.koha-community.org Reporter: blawlor@clamsnet.org QA Contact: testopia@bugs.koha-community.org The permission check to display the Receive shipments button in the Vendors table and Vendors page requires full acquisitions permissions. (Any route like koha/acquisition/vendors) It doesn't just check just for the sub permission order_receive.
From VendorShow.vue line 48:
<ToolbarButton v-if=" vendor.active && vendor.baskets_count > 0 && isUserPermitted('CAN_user_acquisition_order_receive') " :to="{ path: '/cgi-bin/koha/acqui/parcels.pl', query: { booksellerid: vendor.id }, }" icon="inbox" :title="$__('Receive shipments')" callback="redirect" /> This looks like it should work to check for the order_receive sub permission, but it only renders when the user has full acquisitions permissions. This is similar to bug 40684, so my guess is it needs a similar fix in /api/v1/swagger/paths/acquisitions_orders.yaml -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.