From b72bff0f84e3cfd284d16550abe5c78493368dde Mon Sep 17 00:00:00 2001 From: Martin Renvoize Date: Fri, 27 Feb 2026 10:10:51 +0000 Subject: [PATCH] Bug 10190: Fix patron_categories permission format The x-koha-authorization was using 'parameters: catalogue' which the Koha auth system interprets as a 'catalogue' subpermission within the 'parameters' module (which doesn't exist), causing a 403 for any user. The correct format for the top-level 'catalogue' permission is 'catalogue: "1"', consistent with all other read-only API endpoints. --- api/v1/swagger/paths/patron_categories.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/v1/swagger/paths/patron_categories.yaml b/api/v1/swagger/paths/patron_categories.yaml index ed5fdf8efd5..aff9bb4c411 100644 --- a/api/v1/swagger/paths/patron_categories.yaml +++ b/api/v1/swagger/paths/patron_categories.yaml @@ -51,4 +51,4 @@ $ref: "../swagger.yaml#/definitions/error" x-koha-authorization: permissions: - parameters: catalogue + catalogue: "1" -- 2.53.0