https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40912
Bug ID: 40912
Summary: Receive shipments button requires full acquisitions
permissions not just order_receive
Change sponsored?: ---
Product: Koha
Version: Main
Hardware: All
OS: All
Status: NEW
Severity: major
Priority: P5 - low
Component: Acquisitions
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
The permission check to display the Receive shipments button in the Vendors
table and Vendors page requires full acquisitions permissions. (Any route like
koha/acquisition/vendors) It doesn't just check just for the sub permission
order_receive.
From VendorShow.vue line 48:
<ToolbarButton
v-if="
vendor.active &&
vendor.baskets_count > 0 &&
isUserPermitted('CAN_user_acquisition_order_receive')
"
:to="{
path: '/cgi-bin/koha/acqui/parcels.pl',
query: { booksellerid: vendor.id },
}"
icon="inbox"
:title="$__('Receive shipments')"
callback="redirect"
/>
This looks like it should work to check for the order_receive sub permission,
but it only renders when the user has full acquisitions permissions.
This is similar to bug 40684, so my guess is it needs a similar fix in
/api/v1/swagger/paths/acquisitions_orders.yaml
--
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
