Two endpoints specify the same permissionsRequired which is not allowed for Eureka
Description
CSP Request Details
None
CSP Rejection Details
None
Potential Workaround
None
Attachments
1
Checklist
hideActivity
Show:

Dennis Bridges 5 hours ago
This seems that it is a blocker for serials management in sunflower. It may require a csp if we miss the suffix deadline.
Details
Assignee
UnassignedUnassignedReporter
Owen StephensOwen StephensLabels
Priority
P2Sprint
Development Team
ThunderjetRelease
Sunflower (R1 2025) Bug FixRCA Group
TBDTestRail: Cases
Open TestRail: CasesTestRail: Runs
Open TestRail: Runs
Details
Details
Assignee
Unassigned
UnassignedReporter

Labels
Priority
Sprint
Development Team
Thunderjet
Release
Sunflower (R1 2025) Bug Fix
RCA Group
TBD
TestRail: Cases
Open TestRail: Cases
TestRail: Runs
Open TestRail: Runs
Created 9 hours ago
Updated 3 hours ago
The endpoints
/orders/pieces-batch
and/orders/pieces-batch/status
both have permissionsRequired as["orders.pieces.collection.post"],
This doesn’t work when translating the permissions to Eureka.
Based on the permissions in ui-receiving it is expected that assigning the `Receiving: View, edit` permission - in Eureka: Data - UI-Receiving - Edit would allow the user to POST to
/orders/pieces-batch
. This does not workThis in turn means that the creation of receiving pieces from the Serials Management module, which uses the
/orders/pieces-batch
endpoint does not work except for a super-user with all permissions