Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Error toasts when opening a user for edit without having "User Roles" capability set

Description

Steps to reproduce:

  1. Log in into etesting-snapshot (https://folio-etesting-snapshot-diku.ci.folio.org/) as a user having these capability sets assigned:

    1. Data - UI-Users - View

    2. Data - UI-Users - Edit

  2. Go to “Users“ app

  3. Open any user

  4. Click on “Actions” button in the third pane → Select “Edit” option

Expected result: “Edit“ pane is opened. No error notifications shown.

Actual result: “Edit“ pane is opened. Two error toast notifications shown with the same text “Something went wrong. Please try again later.“. In DevTools, GET /roles, GET /roles/users calls fail with 403 status and the following response bodies:

Additional information:

  • Having “Data - Roles Users - Manage“ capability set resolves the issue.

  • The same behavior when creating a user with the following minimal capability sets:

    • Data - UI-Users - View

    • Data - UI-Users - Create

  • See examples:

 

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Attachments

5

Checklist

hide

Activity

Show:

Aidyn ZhakizhanovDecember 17, 2024 at 7:57 AM

I confirm, it is because of “UI-Users“ capabilities/sets are associated with an old “app-platform-complete“ version (1.0.0) instead of updated one.

Yauhen ViazauDecember 17, 2024 at 6:59 AM

Tested on Eureka BF

https://eureka-bugfest-ramsons-consortium.int.aws.folio.org/ - works as expected

https://eureka-bugfest-ramsons.int.aws.folio.org/ - issue is still active

:

The issue is still active on Eureka BF non-ECS. But “UI-Users“ capabilities/sets there are all associated with an old “app-platform-complete“ version (1.0.0).

See .

Can you confirm that we just don’t have the updated capability sets there due to , and therefore it is expected for the current issue to be still active there? If yes, we can close this ticket (fix is working on ECS where there are no issues with “UI-Users“ capabilities/sets)

JenkinsNotificationsDecember 16, 2024 at 4:50 PM

Deployed to the Ramsons bf env. Moved status to In bugfix review from status Awaiting deployment. Please proceed with the verification.

Ryan BergerDecember 12, 2024 at 7:31 PM

In discussing with this morning, I think this issue is out of scope for since the permissions check happens in ui-users code.

Yauhen ViazauDecember 12, 2024 at 2:34 PM

Tested on https://folio-etesting-snapshot-diku.ci.folio.org/ - issue is not reproducible

See example:

Notes:

With the current setup, a user with “Data - UI-Users - Edit/Create“ capability sets can assign and unassign roles when editing a user.

, , - I think it might conflict with .

Done

Details

Assignee

Reporter

Labels

Priority

Story Points

Sprint

Development Team

Eureka

Fix versions

Release

Ramsons (R2 2024) Bug Fix

RCA Group

Missing module permission

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created October 25, 2024 at 5:07 PM
Updated March 17, 2025 at 8:34 AM
Resolved December 12, 2024 at 3:04 PM
Loading...