(FSE Dry run 1) 403 Forbidden response when sending the GET request to {{Edge URL}}/courses/reserves. Permission issue.

Description

Overview: GET request to https://edge-crs-sandbox2.int.aws.folio.org/courses/reserves fails with a 403 response

Steps to reproduce:

1. Send the GET request to the following endpoint:
   <<Edge URL>>/courses/reserves
   Add "Authorization" header with value of edge user API key

Expected result: Response has 200 status code

• Response body includes “reserves” attribute containing an array of reserve objects (each with “id”, “courseListingId” and other attributes)

Actual result: Response with 403 Status and the following response body:

Additional info:

• This issue was fixed in previously on evrk2 by adding the following capabilities to the edge role:

  • "course-reserves-storage.reserves.collection.get"

  • "course-reserves-storage.courselistings.reserves.collection.get"

• What is required now is to ensure this role will have all necessary capabilities by default (seemingly a DevOps job)

• NOT reproducible for FSE Dry run 1 ECS

• Also reproducible on https://eureka-bugfest-ramsons.int.aws.folio.org/ (and not on ECS - https://eureka-bugfest-ramsons-consortium.int.aws.folio.org)