ECS | User in member tenant can't get search results for receiving titles without refreshing the page
Description
CSP Request Details
None
CSP Rejection Details
None
Potential Workaround
None
Attachments
2
Checklist
hideActivity
Show:

Joseph Reimers November 6, 2024 at 1:41 PM
Works as expected

Dimitri Gogiashvili November 5, 2024 at 11:38 AM
Tested on https://folio-dev-firebird-consortium.ci.folio.org/ works as expected
Hello, , please review. Thanks!

Mikita Siadykh November 5, 2024 at 11:16 AM
please verify, thanks
Done
Details
Details
Assignee

Reporter

Priority
Sprint
None
Development Team
Thunderjet
Fix versions
Release
Ramsons (R2 2024) Bug Fix
RCA Group
Implementation coding issue
TestRail: Cases
Open TestRail: Cases
TestRail: Runs
Open TestRail: Runs
Created October 30, 2024 at 10:21 AM
Updated November 12, 2024 at 7:54 AM
Resolved November 6, 2024 at 1:41 PM
TestRail: Cases
TestRail: Runs
Overview: When user that does not have receiving permissions in Central tenant searches for receiving title in Member tenant, they don’t get any results. If page is refreshed, then search results are successfully displayed.
Preconditions:
“Active affiliation only” setting is selected in "Settings" -> "Orders" -> "Network ordering" -> "Central ordering" in Member tenant
At least one receiving title exists in Member tenant
Authorized User with "Staff" user type has affiliations in the following tenants:
Central
Member
Same user has the following permissions in Member tenant:
Receiving: View
Inventory: View instances, holdings, and items
Same user has the following permissions in Central tenant:
Settings (Consortia): Can view and edit network ordering
User is logged into Member tenant and goes to “Receiving” app
Steps to reproduce:
Click “Reset all” button if available
Search for the receiving title from preconditions
Expected result: Search results pane contains the receiving title from preconditions
Actual result:
No result found/displayed on search results pane
403 response in devtools: Access for user <username> (081d51ed-59cd-4a67-b976-0012744d9435) requires permission: consortium-search.holdings.batch.collection.get