| Summary: | Receive shipments button requires full acquisitions permissions not just order_receive | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Brendan Lawlor <blawlor> |
| Component: | Acquisitions | Assignee: | Bugs List <koha-bugs> |
| Status: | RESOLVED DUPLICATE | QA Contact: | Testopia <testopia> |
| Severity: | major | ||
| Priority: | P5 - low | CC: | jonathan.druart, lucas, martin.renvoize, matt.blenkinsop, nick, paul.derscheid |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Bug Depends on: | 38010 | ||
| Bug Blocks: | |||
The permission check to display the Receive shipments button in the Vendors table and Vendors page requires full acquisitions permissions. (Any route like koha/acquisition/vendors) It doesn't just check just for the sub permission order_receive. From VendorShow.vue line 48: <ToolbarButton v-if=" vendor.active && vendor.baskets_count > 0 && isUserPermitted('CAN_user_acquisition_order_receive') " :to="{ path: '/cgi-bin/koha/acqui/parcels.pl', query: { booksellerid: vendor.id }, }" icon="inbox" :title="$__('Receive shipments')" callback="redirect" /> This looks like it should work to check for the order_receive sub permission, but it only renders when the user has full acquisitions permissions. This is similar to bug 40684, so my guess is it needs a similar fix in /api/v1/swagger/paths/acquisitions_orders.yaml