Bug 40684 - Permission error for vendors if user has not full acquisition modul permission
Summary: Permission error for vendors if user has not full acquisition modul permission
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Acquisitions (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on: 38010
Blocks:
  Show dependency treegraph
 
Reported: 2025-08-21 15:53 UTC by Michaela Sieber
Modified: 2025-08-21 15:57 UTC (History)
0 users

See Also:
GIT URL:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michaela Sieber 2025-08-21 15:53:43 UTC
With a restricted libarian account (only some acq permissions) it is not possible to see or edit vendors in acquisition . 
The error message "Something went wrong: Error: Authorization failure. Missing required permission(s)." appears.

The patron would need the acquisition permissions which includes budget permissions among other things, otherwise the API blocks the request.


To recreate:
1. Log in as superlibrarian
2. Search for a user, for example borrowernumber=17
7. Give permissions for catalogue (staff access) and manage_vendors
8. Log in with this account
9. Go to Acquisition module
10. Click on Search Vendors
Check that the error message mentioned above appears