https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43486 Bug ID: 43486 Summary: Add permission-gated patron notification info to the checkin hold.patron embed Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs@lists.koha-community.org Reporter: tomascohen@gmail.com QA Contact: tomascohen@gmail.com CC: tomascohen@gmail.com Blocks: 42383 Target Milestone: --- The checkin REST API (bug 24401) can embed the hold's patron via hold.patron, and the Vue checkin page (bug 42383) uses it to render the "Hold found" dialog. Two things are missing compared to the legacy returns.pl dialog: * The embedded patron is not gated by patron-information visibility. The staff interface hides patron identity when the logged-in user can_see_patrons_from() the patron's library returns false (the borrowers => view_borrower_infos_from_any_libraries permission and the ft_hide_patron_info library group feature). The API embed should honour the same rule and redact the patron when the operator may not see it. * There is no way to know, from the API, whether the patron will be notified about the waiting hold and through which method ("Patron is not notified." / "Main contact method:" in returns.pl), because the patron's messaging preferences are not exposed. This bug adds a permission-gated notification summary to the patron as exposed through the checkin embeds, so consumers (starting with the Vue checkin page) can display the same information the legacy page does without leaking patron data. Test plan: 1. Have a waiting-hold-on-checkin scenario for a patron 2. As a user who can see the patron, GET the checkin availability / POST the checkin with the hold.patron embed => SUCCESS: the response includes the patron notification summary 3. As a user who cannot see patrons from that library (view_borrower_infos_from_any_libraries not held, ft_hide_patron_info group), repeat => SUCCESS: the patron identity/notification data is redacted 4. Sign off :-D Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42383 [Bug 42383] Migrate check-in page to Vue -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.