[Bug 40115] New: Extensive acquisition permissions needed to search vendors
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40115 Bug ID: 40115 Summary: Extensive acquisition permissions needed to search vendors Change sponsored?: --- Product: Koha Version: 25.05 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Acquisitions Assignee: koha-bugs@lists.koha-community.org Reporter: christian.nelson@uwasa.fi QA Contact: testopia@bugs.koha-community.org In the acquitions module (acqui-home.pl) when searching for vendors (eg. for receiving orders) the user gets the message "Something went wrong: Error: Authorization failure. Missing required permission(s)." and the page stays on loading forever. This happens unless the user has extensive acquisition permissions, such as managing budget plannings (planning_manage). It should be possible to perform routine acquitions tasks such as creating baskets and receiving orders without permissions to modify budgets. Koha version: 25.05.00.000 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40115 Anneli Österman <anneli.osterman@koha-suomi.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |anneli.osterman@koha-suomi. | |fi -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40115 Andrii Nugged <nugged@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nugged@gmail.com --- Comment #1 from Andrii Nugged <nugged@gmail.com> --- The issue might be here: api/v1/swagger/paths/acquisitions_vendors_config.yaml:36-38 x-koha-authorization: permissions: acquisition: 1 If we compare with the pre-Vue version in acqui/vendors.pl:35: flagsrequired => { acquisition => '*' }, So the YAML should be: acquisition: "*" to allow to GET /acquisitions/vendors/config if user has ANY of sub-parameters in "acquisition" permissions group. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40115 --- Comment #2 from Andrii Nugged <nugged@gmail.com> --- seems to be fixed in Koha 25.05.04 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40115 Christian Nelson <christian.nelson@uwasa.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org