From 21da0983b05ac44a65a527fd871b83c9888f0689 Mon Sep 17 00:00:00 2001 From: Lucas Gass Date: Tue, 17 Feb 2026 21:15:48 +0000 Subject: [PATCH] Bug 41867: All staff with acq permissions should be able to do vendor search To test: 1/ Have a staff member with at least one acquisition that is NOT vendors_manage or marc_order_manage. 2/ Sign in as that staff member and attempt a vendor search. 3/ See an error like "Something went wrong: Error: Authorization failure. Missing required permission(s)." 4/ APPLY PATCH, restart_all, yarn build, AND clear browser cache. 5/ Try step 2 again, you should be able to see the list of vendors. --- api/v1/swagger/paths/acquisitions_vendors.yaml | 4 +--- .../paths/acquisitions_vendors_extended_attribute_types.yaml | 2 +- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/api/v1/swagger/paths/acquisitions_vendors.yaml b/api/v1/swagger/paths/acquisitions_vendors.yaml index 76bf9ea08a7..1f1309c32f4 100644 --- a/api/v1/swagger/paths/acquisitions_vendors.yaml +++ b/api/v1/swagger/paths/acquisitions_vendors.yaml @@ -80,9 +80,7 @@ $ref: "../swagger.yaml#/definitions/error" x-koha-authorization: permissions: - - acquisition: - - vendors_manage - - marc_order_manage + - acquisition: '*' - erm: 1 post: x-mojo-to: Acquisitions::Vendors#add diff --git a/api/v1/swagger/paths/acquisitions_vendors_extended_attribute_types.yaml b/api/v1/swagger/paths/acquisitions_vendors_extended_attribute_types.yaml index ceb2ba44661..682097e469d 100644 --- a/api/v1/swagger/paths/acquisitions_vendors_extended_attribute_types.yaml +++ b/api/v1/swagger/paths/acquisitions_vendors_extended_attribute_types.yaml @@ -51,4 +51,4 @@ $ref: "../swagger.yaml#/definitions/error" x-koha-authorization: permissions: - - acquisition: vendors_manage + - acquisition: '*' -- 2.39.5