[Koha-bugs] [Bug 23517] Incorrect permission requirements for holds operations via the API

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23517

--- Comment #1 from Tomás Cohen Arazi <tomascohen at gmail.com> ---
Owen, would you say we should better redefine the holds permissions in a more
fine-grained way and then adjust the API to reflect that?

Hm, maybe we can set 'priority' as read-only and change 'reserveforothers' for
'place_holds' for the first problem.

And for the second one, add a new endpoint like PUT /holds/:hold_id/priority
requiring the 'modify_holds_priority'. What do you think?

-- 
You are receiving this mail because:
You are watching all bug changes.