From b6b91dd82aef66636d9129c521a2b4ce56053c4d Mon Sep 17 00:00:00 2001 From: Tomas Cohen Arazi Date: Wed, 23 Jul 2025 18:26:08 -0300 Subject: [PATCH] Bug 40441: Make /auth/password/validation use new permission This patch updates the /auth/password/validation endpoint to use the new api_validate_password permission instead of the generic borrowers permission. This provides more granular control over who can use the password validation API endpoint. Signed-off-by: Tomas Cohen Arazi --- api/v1/swagger/paths/auth.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/v1/swagger/paths/auth.yaml b/api/v1/swagger/paths/auth.yaml index 052565e4de6..700023cf555 100644 --- a/api/v1/swagger/paths/auth.yaml +++ b/api/v1/swagger/paths/auth.yaml @@ -1183,4 +1183,4 @@ $ref: ../swagger.yaml#/definitions/error x-koha-authorization: permissions: - borrowers: "1" + borrowers: api_validate_password -- 2.39.5