Uploaded image for project: 'mod-orders'
  1. mod-orders
  2. MODORDERS-256

Restrict search/view of PO, POL, Piece records based upon acquisitions unit

    XMLWordPrintable

Details

    • Story
    • Status: Closed (View Workflow)
    • P3
    • Resolution: Done
    • None
    • 8.0.0
    • None
    • ACQ Sprint 67, ACQ Sprint 68, ACQ Sprint 69
    • 3
    • Thunderjet

    Description

      Overview
      Restrict search/view of orders, poLines and pieces based upon the acquisitions unit memberships of the user and the acquisitions unit being assigned to the record.

      GET by Id applies to:

      • purchase-orders
      • po-lines
      • pieces

      GET by query applies to:

      • purchase-orders
      • po-lines
      • orders
      • order-lines
      • receiving-history

      NOTE: since get pieces by query (GET /order-storage/pieces?query=...) isn't exposed via mod-orders and only used internally we don't need to touch it in scope of this story. At some point that endpoint might be deprecated in favor of receiving-history anyway.

      Acquisitions units are described on the wiki . The order-specific details which this story covers can also be found there.

      Acceptance Criteria:

      • Acquisitions units are used to determine if a user can search for/view the PO/POL/Piece record
      • Unit tests are updated
      • API tests are updated

      TestRail: Results

        Attachments

          Issue Links

            Activity

              People

                cmcnally Craig McNally
                cmcnally Craig McNally
                Craig McNally Craig McNally
                Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  TestRail: Runs

                    TestRail: Cases