@@ -, +, @@ --- Koha/REST/V1.pm | 5 ++--- Koha/REST/V1/Patron.pm | 1 - 2 files changed, 2 insertions(+), 4 deletions(-) --- a/Koha/REST/V1.pm +++ a/Koha/REST/V1.pm @@ -81,11 +81,10 @@ sub authenticate_api_request { } my $authorization = $action_spec->{'x-koha-authorization'}; - return $next->($c) if allow_owner($c, $authorization, $user); - return $next->($c) if allow_guarantor($c, $authorization, $user); - my $permissions = $authorization->{'permissions'}; return $next->($c) if C4::Auth::haspermission($user->userid, $permissions); + return $next->($c) if allow_owner($c, $authorization, $user); + return $next->($c) if allow_guarantor($c, $authorization, $user); return $c->render_swagger( { error => "Authorization failure. Missing required permission(s).", required_permissions => $permissions }, --- a/Koha/REST/V1/Patron.pm +++ a/Koha/REST/V1/Patron.pm @@ -19,7 +19,6 @@ use Modern::Perl; use Mojo::Base 'Mojolicious::Controller'; -use C4::Auth qw( haspermission ); use Koha::Patrons; sub list { --