Bug 10190: correction to x-koha-authorization on /circulation_rules/config
The config endpoint is used exclusively by the Circulation Triggers Vue app, which is gated on parameters/manage_circ_rules. Using acquisition/'*' and erm/1 was inconsistent copy-paste from an unrelated endpoint and would 403 circ-rules admins while granting access to unrelated module users. Signed-off-by: Michaela <michaela.sieber@kit.edu> Signed-off-by: Nick Clemens <nick@bywatersolutions.com> Signed-off-by: Pedro Amorim <pedro.amorim@openfifth.co.uk>
This commit is contained in:
parent
228bf75845
commit
8659f4e016
|
|
@ -35,5 +35,4 @@
|
|||
$ref: "../swagger.yaml#/definitions/error"
|
||||
x-koha-authorization:
|
||||
permissions:
|
||||
- acquisition: '*'
|
||||
- erm: 1
|
||||
- parameters: manage_circ_rules
|
||||
|
|
|
|||
Loading…
Reference in New Issue