Bug 40684

Summary: Permission error for vendors if user has not full acquisition modul permission
Product: Koha Reporter: Michaela Sieber <michaela.sieber>
Component: AcquisitionsAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: normal    
Priority: P5 - low    
Version: Main   
Hardware: All   
OS: All   
See Also: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38446
GIT URL: Change sponsored?: ---
Patch complexity: --- Documentation contact:
Documentation submission: Text to go in the release notes:
Version(s) released in:
Circulation function:
Bug Depends on: 38010    
Bug Blocks:    

Description Michaela Sieber 2025-08-21 15:53:43 UTC
With a restricted libarian account (only some acq permissions) it is not possible to see or edit vendors in acquisition . 
The error message "Something went wrong: Error: Authorization failure. Missing required permission(s)." appears.

The patron would need the acquisition permissions which includes budget permissions among other things, otherwise the API blocks the request.


To recreate:
1. Log in as superlibrarian
2. Search for a user, for example borrowernumber=17
7. Give permissions for catalogue (staff access) and manage_vendors
8. Log in with this account
9. Go to Acquisition module
10. Click on Search Vendors
Check that the error message mentioned above appears