Uploaded image for project: 'mod-circulation'
  1. mod-circulation
  2. CIRC-1204

missing perm. for check-in-by-barcode.post (impacts hold expiration notices)

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • P2
    • Resolution: Done
    • None
    • 22.1.0
    • EPAM-Veg Sprint 121
    • 1
    • Vega
    • R2 2021 Hot Fix #4
    • Yes
    • Chalmers
    • Missing module permission

    Description

      Overview:
      Steps to Reproduce:

      • Log into juniper or iris bugfest as a user that has not explicitly been assigned the scheduled-notice-storage.scheduled-notices.collection.delete permission
      • Place a page request using a combination of patron/item that will trigger an expiration notice for a request.
      • Check in the item you just placed a request for. The request status will change to Awaiting pickup

       

      Expected Results:

      A "Hold Expiration" scheduled notice(s) should be created.

      You can verify with

      /scheduled-notice-storage/scheduled-notices?query=(triggeringEvent ='Hold Expiration')

      Actual Results:

      The "Hold Expiration" notices are not being created. No indication of an issue in the UI...but this message in the logs:

       

      ...circulation.rules.notice-policy.get""]
      (user permissions) nor [""SYS#mod-circulation-20.1.7#/circulation/check-in-by-barcode#[POST]""](module permissions) do not contain scheduled-notice-storage.scheduled-notices.collection.delete"
      2021-08-10 15:33:12.923,15:33:12 [121677/circulation;084011/scheduled-notice-storage] [fs00001051] [26dbf63c-7b4a-4e2f-86f3-3c4cba98c862] [mod-authtoken] ERROR MainVerticle Access requires permission: scheduled-notice-storage.scheduled-notices.collection.delete
      2021-08-10 15:33:12.924,"10.23.36.104 - - [10/Aug/2021:15:33:12 +0000] ""GET /mod-search/admin/health HTTP/1.1"" 200 25 rt=0.011 uct=""0.000"" uht=""0.012"" urt=""0.012"" ""ELB-HealthChecker/2.0"" ""-"" ""-"" ""-"""
      2021-08-10 15:33:12.924,15:33:12 [121677/circulation;084011/scheduled-notice-storage] [fs00001051] [] [] INFO ProxyContext 121677/circulation;084011/scheduled-notice-storage RES 403 5018us mod-authtoken-2.7.0 http://pvt.lb.ism.folio-eis.us-east-1:8051/mod-authtoken/scheduled-notice-storage/scheduled-notices?query=requestId%3D%3D%22aefe14cb-476d-42e7-be7d-22036c9257bc%22
      2021-08-10 15:33:12.925,15:33:12 [] [] [] [] INFO LogUtil 127.0.0.1:37404 GET /patron-notice-policy-storage/patron-notice-policies/95d77714-26b8-43b6-a395-b1bf8b49b9ed null HTTP_1_1 200 2119 2 tid=fs00001051 OK 
      2021-08-10 15:33:12.925,15:33:12 [] [] [] [] INFO LogUtil org.folio.rest.RestVerticle start invoking getPatronNoticePolicyStoragePatronNoticePoliciesByPatronNoticePolicyId
      2021-08-10 15:33:12.926,"15:33:12 ERROR LogHelper DELETE scheduled patron notices by query failed: A CQL query of ""requestId==""aefe14cb-476d-42e7-be7d-22036c9257bc"""". Cause: [403] Access requires permission: scheduled-notice-storage.scheduled-notices.collection.delete"
      

       

      I do see this error message in the iris and juniper bugfest logs so I think it can be recreated:

      Juniper log 8/3/21

      12:32:41
       ERROR LogHelper            DELETE scheduled patron notices by query 
      failed: A CQL query of 
      "requestId=="56b67bf3-9a34-4144-a4f3-4b300b46bb54"". Cause: [403] Access
       requires permission: 
      scheduled-notice-storage.scheduled-notices.collection.delete2021-08-03T08:32:41.263-04:0012:32:41
       INFO  SubPublishingService Event published successfully. ID: 
      e2aa30b0-d04f-4ee0-98e8-c6c138e7294b, type: LOG_RECORD, payload: 
      {"logEventType":"CHECK_IN_EVENT","servicePoint
      

      Additional Information:
      URL:
      Interested parties:
      GVSU
      Skidmore

      TestRail: Results

        Attachments

          1. 2021-08-27_8-58-57.png
            2021-08-27_8-58-57.png
            32 kB
          2. Evidence-CIRC-1204.png
            Evidence-CIRC-1204.png
            171 kB
          3. Evidence-open-requests.png
            Evidence-open-requests.png
            105 kB
          4. Evidence-request-notice.png
            Evidence-request-notice.png
            157 kB
          5. Evidence-user-permissions.png
            Evidence-user-permissions.png
            129 kB
          6. hotfix-3.png
            hotfix-3.png
            44 kB
          7. hotfix-4.png
            hotfix-4.png
            44 kB
          8. image-2021-08-27-09-02-05-594.png
            image-2021-08-27-09-02-05-594.png
            32 kB
          9. image-2021-08-27-09-20-17-556.png
            image-2021-08-27-09-20-17-556.png
            65 kB
          10. version-screen-shot-one.png
            version-screen-shot-one.png
            132 kB

          Issue Links

            Activity

              People

                roman-barannyk Roman Barannyk
                msuranofsky Michelle Suranofsky
                Michelle Suranofsky Michelle Suranofsky
                Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  TestRail: Runs

                    TestRail: Cases