[Koha-bugs] [Bug 24841] New: REST API should check if patron is restricted/debarred

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24841

            Bug ID: 24841
           Summary: REST API should check if patron is restricted/debarred
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5 - low
         Component: REST API
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: magnus at libriotech.no

Bug 17247 "ILS-DI HoldTitle and HoldItem should check if patron is restricted"
adds checks to see if the patron is restricted before a hold is placed. These
checks are added to C4::ILSDI::Services::HoldItem() and
C4::ILSDI::Services::HoldTitle(). 

As far as I can tell, the same checks are missing from the REST API,
specifically for "POST /api/v1/holds". 

Koha::REST::V1::Holds::add() does call C4::Reserves::CanItemBeReserved() and
C4::Reserves::CanBookBeReserved(), but as far as I can tell, those subs do not
check if the patron in question is debarred. 

Am I missing something or is this a bug?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.