Two endpoints specify the same permissionsRequired which is not allowed for Eureka

Description

The endpoints /orders/pieces-batch and /orders/pieces-batch/status both have permissionsRequired as ["orders.pieces.collection.post"],

This doesn’t work when translating the permissions to Eureka.

Based on the permissions in ui-receiving it is expected that assigning the `Receiving: View, edit` permission - in Eureka: Data - UI-Receiving - Edit would allow the user to POST to /orders/pieces-batch. This does not work

This in turn means that the creation of receiving pieces from the Serials Management module, which uses the /orders/pieces-batch endpoint does not work except for a super-user with all permissions

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Attachments

1

Checklist

hide

Activity

Show:

Dennis Bridges 5 hours ago

This seems that it is a blocker for serials management in sunflower. It may require a csp if we miss the suffix deadline.

Details

Assignee

Reporter

Priority

Development Team

Thunderjet

Release

Sunflower (R1 2025) Bug Fix

RCA Group

TBD

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created 9 hours ago
Updated 3 hours ago
Loading...