From 6f11459cd38b50b1907240bb429a159adc23213b Mon Sep 17 00:00:00 2001 From: Martin Renvoize Date: Thu, 26 Feb 2026 17:07:38 +0000 Subject: [PATCH] Bug 10190: Fix permission mismatch on /circulation_rules/config endpoint The config endpoint was gated on parameters: manage_circ_rules, while the actual GET/PUT /circulation_rules endpoints require circulate: circulate_remaining_permissions. Any user who can read/write circulation rules should also be able to load the config that drives the UI. --- api/v1/swagger/paths/circulation_rules_config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/v1/swagger/paths/circulation_rules_config.yaml b/api/v1/swagger/paths/circulation_rules_config.yaml index b6f94e6918f..6d8c7bf7f90 100644 --- a/api/v1/swagger/paths/circulation_rules_config.yaml +++ b/api/v1/swagger/paths/circulation_rules_config.yaml @@ -35,4 +35,4 @@ $ref: "../swagger.yaml#/definitions/error" x-koha-authorization: permissions: - - parameters: manage_circ_rules + - circulate: circulate_remaining_permissions -- 2.53.0