From aeb4ee28d62abef313443063b8eb83f05db12b8b Mon Sep 17 00:00:00 2001 From: Tomas Cohen Arazi Date: Fri, 18 Jan 2019 12:02:38 -0300 Subject: [PATCH] Bug 16497: (follow-up) GET operations require staff access With the introduction of the /public namespace all other endpoints, the rest of the endpoints are restricted to privileged users. This patch makes the GET /libraries and GET /libraries/:library_id endpoints require 'catalogue' permissions. Signed-off-by: Tomas Cohen Arazi --- api/v1/swagger/paths/libraries.json | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/api/v1/swagger/paths/libraries.json b/api/v1/swagger/paths/libraries.json index 70249ed227..c4cd55b578 100644 --- a/api/v1/swagger/paths/libraries.json +++ b/api/v1/swagger/paths/libraries.json @@ -152,6 +152,11 @@ "$ref": "../definitions.json#/error" } } + }, + "x-koha-authorization": { + "permissions": { + "catalogue": "1" + } } }, "post": { @@ -253,6 +258,11 @@ "$ref": "../definitions.json#/error" } } + }, + "x-koha-authorization": { + "permissions": { + "catalogue": "1" + } } }, "put": { -- 2.20.1