Restrict search/view of orders, poLines and pieces based upon the acquisitions unit memberships of the user and the acquisitions unit being assigned to the record.
GET by Id applies to:
GET by query applies to:
NOTE: since get pieces by query (GET /order-storage/pieces?query=...) isn't exposed via mod-orders and only used internally we don't need to touch it in scope of this story. At some point that endpoint might be deprecated in favor of receiving-history anyway.
Acquisitions units are described on the wiki . The order-specific details which this story covers can also be found there.
- Acquisitions units are used to determine if a user can search for/view the PO/POL/Piece record
- Unit tests are updated
- API tests are updated