ECS - Member consortial accordion is not displaying when a user has affiliations but does not have permission to view holdings (Poppy CSP)

Description

Overview: When shared instance have Member tenant 1 holdings and trying to look them on Member tenant 2, on which he have affiliation but don't have permissions, consortial member accordion is not displaying

Preconditions:

Shared instance with holdings from Member tenant 1 exists

User have following permissions:

Central tenant: "Inventory: all permissions"

Member tenant 1: No permissions

Member tenant 2: "Inventory: all permissions"

 

Steps to Reproduce:

  1. Login on member tenant 2

  2. Find and select the instance from precondition

  3. Expand "Consortial holdings" accordion

Expected Results: Member tenant 1 consortial accordion is displayed, but user can't see the holdings of according member tenant

Actual Results: Consortial accordion is empty

Additional Information:
Reproduced on Folijet rancher, Sprint testing and Poppy Consortial Bugfest envs

See attached screenshot

Interested parties:

 

 

Critical service patch details

  1. Describe issue impact on business - This ticket is aimed to update the way that Consortial Holdings are displayed in FOLIO ECS to better align with original expectations. Currently, users must have Affiliations with Member Tenants in order to see Consortial Holdings coming from the Member Tenants. This work will shift Consortial Holdings display to pull values from mod-search, rather than directly from each tenant so that all users can freely view Consortial Holdings without need for various Affiliations or Permissions.

  2. What institutions are affected? (field “Affected Institutions” in Jira to be populated) - All ECS.

  3. What is the workaround if exists? Only workaround would be to assign Affiliations for all Member Tenants to all Users, which would be cumbersome and tedious to maintain.

  4. What areas will be impacted by fix (i.e. what areas need to be retested) - ui-inventory; “Consortial Holdings” accordion.

  5. Brief explanation of technical implementation and the level of effort (in workdays) and technical risk (low/medium/high). - This work will shift Consortial Holdings display to pull values from mod-search, rather than directly from each tenant. Team Spitifre will be supporting this via .

  6. Brief explanation of testing required and level of effort (in workdays). Provide test plan agreed with by QA Manager and PO.  - Low effort.

  7. What is the roll back plan in case the fix does not work? Revert to previous version.

CSP Request Details

Requested via Slack on 2/27/24

CSP Rejection Details

None

Potential Workaround

None

Attachments

6

Checklist

hide

TestRail: Results

Activity

Show:

Ryan Taylor May 10, 2024 at 12:31 PM

Confirmed to be working as expected now in Poppy Consortia Bugfest. Closing ticket.

Maksym Ishchenko May 10, 2024 at 8:49 AM

Hi
Ticket verified on Poppy Consortia Bugfest. Now user without permissions on member tenant-1 can see it affiliation on other member tenant. Please doublecheck

 

Permissions:

 

 

Ryan Taylor May 2, 2024 at 1:42 PM

- Can you confirm if this update deployed to Poppy ECS bugfest ()? Jenkins notification seems to reference non-ECS Poppy BF. Thanks!

JenkinsNotifications April 22, 2024 at 3:33 PM

Deployed to the Poppy bf env. Moved status to In bugfix review from status Awaiting deployment. Please proceed with the verification.

Mariia Aloshyna April 10, 2024 at 1:04 PM

Hi for the primary affiliation only Inventory: View instances, holdings, and items permission will be enough.

Done

Details

Assignee

Reporter

Priority

Story Points

Sprint

Development Team

Folijet

Fix versions

Release

Poppy (R2 2023) Service Patch #5

CSP Approved

Yes

RCA Group

Incomplete/missing requirements

Affected releases

Poppy (R2 2023)

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created January 11, 2024 at 9:57 AM
Updated May 10, 2024 at 12:31 PM
Resolved April 10, 2024 at 12:36 PM
TestRail: Cases
TestRail: Runs