Bug 40868

Summary: Vendor module permissions are ignored
Product: Koha Reporter: Matt Blenkinsop <matt.blenkinsop>
Component: AcquisitionsAssignee: Matt Blenkinsop <matt.blenkinsop>
Status: Signed Off --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: michaela.sieber
Version: Main   
Hardware: All   
OS: All   
GIT URL: Change sponsored?: ---
Patch complexity: --- Documentation contact:
Documentation submission: Text to go in the release notes:
Version(s) released in:
Circulation function:
Bug Depends on: 40684    
Bug Blocks:    
Attachments: Bug 40868: Restore full list of permissions to the vendors app
Bug 40868: Restore full list of permissions to the vendors app

Description Matt Blenkinsop 2025-09-24 09:11:34 UTC
In the vendors vue app, if a patron doesn't have the full set of permissions (i.e. acquisitions: '*') then all acquisitions permissions are ignored

To recreate:
1) Create or edit a user to have all acquisitions permissions except one (not relevant which one, any will do)
2) Log into the staff interface and go to acquisitions > vendors and click the vendor in the table
3) The left menu will be missing everything except invoices
Comment 1 Matt Blenkinsop 2025-09-24 09:13:57 UTC
Created attachment 186859 [details] [review]
Bug 40868: Restore full list of permissions to the vendors app

This patch adjusts the logic to consider all permissions and not just the top level flags

Test plan:
1) Create or edit a user to have all acquisitions permissions except one (not relevant which one, any will do)
2) Log into the staff interface and go to acquisitions > vendors and click the vendor in the table
3) The left menu will be missing everything except invoices
4) Apply patch and restart_all
5) Refresh the page, the menu should now be populated
Comment 2 OpenFifth Sandboxes 2025-09-25 11:44:43 UTC
Created attachment 186919 [details] [review]
Bug 40868: Restore full list of permissions to the vendors app

This patch adjusts the logic to consider all permissions and not just the top level flags

Test plan:
1) Create or edit a user to have all acquisitions permissions except one (not relevant which one, any will do)
2) Log into the staff interface and go to acquisitions > vendors and click the vendor in the table
3) The left menu will be missing everything except invoices
4) Apply patch and restart_all
5) Refresh the page, the menu should now be populated

Signed-off-by: Michaela Sieber <michaela.sieber@kit.edu>