|
Lines 81-91
sub authenticate_api_request {
Link Here
|
| 81 |
} |
81 |
} |
| 82 |
|
82 |
|
| 83 |
my $authorization = $action_spec->{'x-koha-authorization'}; |
83 |
my $authorization = $action_spec->{'x-koha-authorization'}; |
| 84 |
return $next->($c) if allow_owner($c, $authorization, $user); |
|
|
| 85 |
return $next->($c) if allow_guarantor($c, $authorization, $user); |
| 86 |
|
| 87 |
my $permissions = $authorization->{'permissions'}; |
84 |
my $permissions = $authorization->{'permissions'}; |
| 88 |
return $next->($c) if C4::Auth::haspermission($user->userid, $permissions); |
85 |
return $next->($c) if C4::Auth::haspermission($user->userid, $permissions); |
|
|
86 |
return $next->($c) if allow_owner($c, $authorization, $user); |
| 87 |
return $next->($c) if allow_guarantor($c, $authorization, $user); |
| 89 |
return $c->render_swagger( |
88 |
return $c->render_swagger( |
| 90 |
{ error => "Authorization failure. Missing required permission(s).", |
89 |
{ error => "Authorization failure. Missing required permission(s).", |
| 91 |
required_permissions => $permissions }, |
90 |
required_permissions => $permissions }, |