Lines 81-91
sub authenticate_api_request {
Link Here
|
81 |
} |
81 |
} |
82 |
|
82 |
|
83 |
my $authorization = $action_spec->{'x-koha-authorization'}; |
83 |
my $authorization = $action_spec->{'x-koha-authorization'}; |
84 |
return $next->($c) if allow_owner($c, $authorization, $user); |
|
|
85 |
return $next->($c) if allow_guarantor($c, $authorization, $user); |
86 |
|
87 |
my $permissions = $authorization->{'permissions'}; |
84 |
my $permissions = $authorization->{'permissions'}; |
88 |
return $next->($c) if C4::Auth::haspermission($user->userid, $permissions); |
85 |
return $next->($c) if C4::Auth::haspermission($user->userid, $permissions); |
|
|
86 |
return $next->($c) if allow_owner($c, $authorization, $user); |
87 |
return $next->($c) if allow_guarantor($c, $authorization, $user); |
89 |
return $c->render_swagger( |
88 |
return $c->render_swagger( |
90 |
{ error => "Authorization failure. Missing required permission(s).", |
89 |
{ error => "Authorization failure. Missing required permission(s).", |
91 |
required_permissions => $permissions }, |
90 |
required_permissions => $permissions }, |