403 error appears for user with missing remote-storage.mappings.collection.get permission

Description

A user with all inventory permissions gets 403 error when goes to instance details pane

Preconditions:

Authorized user with “Inventory: All permissions” permission is logged in

Steps to reproduce:

  1. Go to “Inventory” app

  2. Open “DevTools”

  3. Navigate to any instance details pane

Expected results: No errors in “DevTools” appear

Actual result: 403 error appears in “/remote-storage/mappings”: “Access for user '<name>' (<User ID>) requires permission: remote-storage.mappings.collection.get”

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Attachments

2
  • 04 Nov 2024, 02:05 PM
  • 25 Oct 2024, 09:50 AM

Checklist

hide

Activity

Show:

NinaChistova November 4, 2024 at 2:05 PM

Adding “Settings (Remote storage): Can view remote storage settings“ permission was fixed described issue, response has success status

 

Gurleen Kaur1 November 4, 2024 at 11:00 AM

Hi ,

As per the analysis the permission is not present in the Inventory: All permissions https://github.com/folio-org/ui-inventory/blob/96b015c085f6b5798e78c64df60e5cc42c34dff8/package.json#L131. Infact, this permission is present in Remote storage: View permission and if this permission is added to the user this issue can be resolved https://github.com/folio-org/ui-remote-storage/blob/cfaaa863a50eb70111c01f95f48dc9e8fa2498f2/package.json#L42 . If this permission has to be added in Inventory: All permissions then needs to be confirmed with the PO .
CC: ,

Cannot Reproduce

Details

Assignee

Reporter

Priority

Sprint

Development Team

Volaris

RCA Group

TBD

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs
Created October 25, 2024 at 9:41 AM
Updated November 4, 2024 at 2:13 PM
Resolved November 4, 2024 at 2:13 PM
TestRail: Cases
TestRail: Runs