https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962

--- Comment #309 from Jake Deery <[email protected]> ---
Created attachment 202068
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=202068&action=edit
Bug 14962: Factor missing permissions into http-client

This patch ensures when required_permissions comes back in an API response, a
proper message is displayed to the user, listing out what permissions are
missing.

== TO TEST ==
a)  create a user with only permission to access the staff client, and
manage_budgets under acquisitions
b)  login as this user
c)  go to /cgi-bin/koha/acquisition/vendors?supplier=
d)  notice the unhelpful 'Error: Authorization failure. Missing required
permission(s).'
== APPLY PATCH ==
e)  repeat steps c-d
f)  notice there is now a dump of the json returned by the api
== SIGN OFF ==

Possible follow-up work: we should sort the API's required_permissions response
out so it returns a predictable and sensible output that can have translatable
strin gs attached to it, so we can stop dumping the raw JSON out and start
providing a human-readable permission description.

Sponsored-by: ByWater Solutions

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to