Bug 41867 - Vendor searching should be allowed for any staff with any acquisition permissions
Summary: Vendor searching should be allowed for any staff with any acquisition permiss...
Status: Needs Signoff
Alias: None
Product: Koha
Classification: Unclassified
Component: Acquisitions (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Lucas Gass (lukeg)
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-02-17 21:14 UTC by Lucas Gass (lukeg)
Modified: 2026-02-18 21:38 UTC (History)
4 users (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Comma delimited list of Sponsors:
Crowdfunding goal: 0
Patch complexity: Trivial patch
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 41867: All staff with acq permissions should be able to do vendor search (1.92 KB, patch)
2026-02-17 21:18 UTC, Lucas Gass (lukeg)
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Lucas Gass (lukeg) 2026-02-17 21:14:36 UTC
Vendor searching is currently limited to those staff members who either vendors_manage or marc_order_manage permissions. 

Any staff with at least a single acq permission should be able to search vendors.
Comment 1 Lucas Gass (lukeg) 2026-02-17 21:18:45 UTC
Created attachment 193333 [details] [review]
Bug 41867: All staff with acq permissions should be able to do vendor search

To test:
1/ Have a staff member with at least one acquisition that is NOT vendors_manage or marc_order_manage.
2/ Sign in as that staff member and attempt a vendor search.
3/ See an error like "Something went wrong: Error: Authorization failure. Missing required permission(s)."
4/ APPLY PATCH, restart_all, yarn build, AND clear browser cache.
5/ Try step 2 again, you should be able to see the list of vendors.
Comment 2 David Nind 2026-02-18 21:38:37 UTC
This patch works - I can now view the list of vendors.

However, should you be able to view the vendor as well?

If I go to view the vendor, I get:

  Something went wrong: Error: Authorization failure. Missing required permission(s).

  Loading

Testing notes (using KTD):
1. I edited Henry Acevedo's account so that I could log in as them.
2. I added these permissions:
   - Staff access, allows viewing of catalogue in staff interface (catalogue) 
   - Acquisition management:
     . Manage all baskets and order lines, regardless of restrictions on 
       them (order_manage_all)