Uploaded image for project: 'mod-circulation'
  1. mod-circulation
  2. CIRC-1410

Missing module permissions for POST to /circulation/requests

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • P2
    • Resolution: Done
    • 22.0.6
    • 23.0.0
    • EPAM-Veg Sprint 131, EPAM-Veg Sprint 132
    • 1
    • Vega
    • Lotus R1 2022
    • University of Chicago

    Description

      Overview:
      A user that has been granted the circulation.requests.item.post permission is unable to create a recall request. The API returns a 403 status with the response Access requires permission: circulation-storage.fixed-due-date-schedules.collection.get.

      Steps to Reproduce:
      Create a user with the permission circulation.request.item.post. Attempt to create a recall request.

      Expected Results:
      The request is created.

      Actual Results:
      Error returned as above.

      Additional Information:
      Presumably the circulation-storage.fixed-due-date-schedules.collection.get and possibly circulation-storage.fixed-due-date-schedules.item.get permissions need to be added to the module permission for POST to /circulation/requests in mod-circulation's module descriptor. This may also be true for PUT to /circulation/requests/{id}.

      Interested parties:
      cfehrenbach

      TestRail: Results

        Attachments

          Issue Links

            Activity

              People

                Yusuf Yusuf Murodov
                wayne Wayne Schneider
                Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  TestRail: Runs

                    TestRail: Cases