missing perm. for check-out-by-barcode.post (impacts notices)

Description

Overview:

 
When an item is checked out by a user logged in with 'light' circulation permissions (who doesn't explicitly have the circulation-storage.patron-notice-policies.item.get) permission, an error occurs and notices are not created for the loan.
 
Error from juniper bugfest log:
19:56:25 [371043/circulation;143451/patron-notice-policy-storage] [fs00001067] [ed92ef96-ef55-431c-a05d-69633b9fcb5c] [mod-authtoken] ERROR MainVerticle......(user permissions) nor ["SYS#mod-circulation-20.1.7#/circulation/check-out-by-barcode#[POST]"|#mod-circulation-20.1.7#/circulation/check-out-by-barcode#[POST]"](module permissions) do not contain circulation-storage.patron-notice-policies.item.get
ERROR MainVerticle Access requires permission: circulation-storage.patron-notice-policies.item.get
 

Steps to Reproduce:

  • Log into juniper as a user that has not explicitly been assigned the circulation-storage.patron-notice-policies.item.get permission.  I created a user on juniper bugfest (username: zdoe) with the "Circulation Bug Fest" permission set for testing this.

  • Checkout an item using a combination of patron/item that will trigger notices created (to be sent later - like courtesy notices)

    • I used patron 0000048387 and item barcode 123412341234123 

Expected Results:

Notices should be created.

You can verify with

https://okapi-bugfest-juniper.folio.ebsco.com/scheduled-notice-storage/scheduled-notices?query=(metadata.createdDate="2021-09-10")

Actual Results:

Notices are not being created.

*If you execute this test logged in with 'folio' username the notices will be created because of the permissions the 'folio' user has.

 

Additional Information:
URL:
Interested parties:
Okanagan

 

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Attachments

3

Checklist

hide

TestRail: Results

Activity

Show:

Michelle Suranofsky October 28, 2021 at 11:30 AM

, I tested this and it looks correct. 

 

Steps:

  • Log into juniper as a user that has not explicitly been assigned the circulation-storage.patron-notice-policies.item.get permission.  I created a user on juniper bugfest (username: zdoe) with the ""Circulation Bug Fest"" permission set for testing this.  (I also tested using the permission set circ-student)

  • Checkout an item using a combination of patron/item that will trigger notices created (to be sent later - like courtesy notices)

    • I used patron 5551212333 and item barcode 17056447

 

Notices were generated - confirmed using the API:

 

I also looked at the logs (attached).  I didn't see any permission errors.

 

Charlotte Whitt October 28, 2021 at 9:01 AM

- please test this ticket today.
needs to announce Juniper HF#3.

"Oleksii Petrenko: 10/28/2021 10:47 AM
@channel Hello Prokopovich team. Could you please verify today Juniper HF#3 tickets at bugfest env - https://issues.folio.org/issues/?jql=Release%20%3D%20%22R2%202021%20Hot%20Fix%20%233%[…]rokopovych%20AND%20status%20%3D%20%22In%20bugfix%20review%22
I need to announce Juniper HF#3 soon."

Marc Johnson October 21, 2021 at 10:28 AM

It turns out the original change was included in the 2021 R3 release, so no back porting is needed for 2021 R3.

Marc Johnson October 20, 2021 at 1:44 PM

Please, create separate issue to backport to R3 2021. I could not see clones linked.

Thanks. I'll do that tomorrow and get this back ported to 2021 R3 Bug Fix.

Oleksii Petrenko October 20, 2021 at 1:01 PM

 Please, create separate issue to backport to R3 2021. I could not see clones linked.

Done

Details

Assignee

Reporter

Tester Assignee

Labels

Priority

Story Points

Sprint

Development Team

Prokopovych

Fix versions

Release

R2 2021 Hot Fix #3

RCA Group

Missing module permission

CSP Approved

Yes

Affected Institution

BNCF
Chalmers
Cornell
Okanagan College

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created September 10, 2021 at 5:18 PM
Updated January 27, 2022 at 8:51 AM
Resolved October 21, 2021 at 10:48 AM
TestRail: Cases
TestRail: Runs