| Summary: | Extensive acquisition permissions needed to search vendors | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Christian Nelson <christian.nelson> |
| Component: | Acquisitions | Assignee: | Bugs List <koha-bugs> |
| Status: | NEW --- | QA Contact: | Testopia <testopia> |
| Severity: | normal | ||
| Priority: | P5 - low | CC: | anneli.osterman, nugged |
| Version: | 25.05 | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
|
Description
Christian Nelson
2025-06-11 09:27:11 UTC
The issue might be here:
api/v1/swagger/paths/acquisitions_vendors_config.yaml:36-38
x-koha-authorization:
permissions:
acquisition: 1
If we compare with the pre-Vue version in acqui/vendors.pl:35:
flagsrequired => { acquisition => '*' },
So the YAML should be:
acquisition: "*"
to allow to GET /acquisitions/vendors/config if user has ANY of sub-parameters in "acquisition" permissions group.
seems to be fixed in Koha 25.05.04 |