Active Save button appears in Settings > Circulation > Title level Requests when user only has permission Settings (Circulation): Can view all circulation settings

Description

Overview:

If a user has only the permission Settings (Circulation): Can view all circulation settings, then they can see all the Circulation settings, but are not able to change (edit) the settings. However, if the user goes to Settings > Circulation > Title level requests, then if they edit the setting (for example, selecting or deselecting "Create title level request" selected by default) then an active Save button appears. If the Save button is clicked on, the change is not saved – instead an error message appears:

ERROR: in module @folio/circulation, operation PUT on resource 'settings' failed, saying: Access for user 'ViewAllCircSettings' (5925b934-01e8-429d-925f-de0c5fce1bec) requires permission: configuration.entries.item.put

 

Steps to reproduce:

  1. Create a user in Ramsons bugfest with only the permission Settings (Circulation): Can view all circulation settings.

  1. Log in as the user created in step 1.

  1. Open the Settings app.

  1. In Settings > Circulation > Title level requests, change one of the settings.

Expected Result:

Similar to what happens if you try to edit in Settings > Circulation > Other settings, no Save button appears.

Actual Result:

An active Save button appears. If you click on the Save button, you get an error message popup:

ERROR: in module @folio/circulation, operation PUT on resource 'settings' failed, saying: Access for user 'ViewAllCircSettings' (5925b934-01e8-429d-925f-de0c5fce1bec) requires permission: configuration.entries.item.put

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

Activity

Show:

Dmitriy Litvinenko January 3, 2025 at 12:03 PM

Thank you, this bug will be obsolete after merge

Stephanie Buck December 9, 2024 at 1:58 PM

Thank you, .

Laurence Mini December 9, 2024 at 1:50 PM

, I discovered this in the Ramsons bugfest environment, but it wasn’t from the bugfest testing itself, no. I do the Settings > Circulation documentation, and as this is a new permission, I was doing my due diligence and checking it out prior to writing the documentation for it.

Stephanie Buck December 6, 2024 at 1:56 PM

, did you discover this during bugfest?

Details

Assignee

Reporter

Labels

Priority

Story Points

Development Team

Vega

Release

Trillium (R2 2025)

RCA Group

TBD

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs
Created December 5, 2024 at 4:24 PM
Updated March 5, 2025 at 10:17 PM
TestRail: Cases
TestRail: Runs