https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33993
Bug ID: 33993
Summary: The GET orders endpoint needs to allow users with
order_receive permission
Change sponsored?: ---
Product: Koha
Version: master
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: Acquisitions
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
We're now using the API for loading orders in the order receive page. As such,
we need to allow the GET orders endpoint to function with that permission too.
We have customers where they restrict staff to either 'ordering' or 'receiving'
using permissions.. as we require 'order_manage' or 'order_manage_all' their
users with just 'order_recieve' get a 403 when the orders table attempts to
load on receive pages.
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
