All work

Select view

Select search mode

 
50 of 997

Two endpoints specify the same permissionsRequired which is not allowed for Eureka

Description

The endpoints /orders/pieces-batch and /orders/pieces-batch/status both have permissionsRequired as ["orders.pieces.collection.post"],

This doesn’t work when translating the permissions to Eureka.

"methods": ["POST"], "pathPattern": "/orders/pieces-batch", "permissionsRequired": ["orders.pieces.collection.post"],
{ "methods": ["PUT"], "pathPattern": "/orders/pieces-batch/status", "permissionsRequired": ["orders.pieces.collection.put"],

Based on the permissions in ui-receiving it is expected that assigning the `Receiving: View, edit` permission - in Eureka: Data - UI-Receiving - Edit would allow the user to POST to /orders/pieces-batch. This does not work

This in turn means that the creation of receiving pieces from the Serials Management module, which uses the /orders/pieces-batch endpoint does not work except for a super-user with all permissions

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

Details

Assignee

Reporter

Priority

Development Team

Thunderjet

Release

Sunflower (R1 2025) Bug Fix

RCA Group

TBD

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created 9 hours ago
Updated 3 hours ago

Activity

Show:

Dennis Bridges5 hours ago

This seems that it is a blocker for serials management in sunflower. It may require a csp if we miss the suffix deadline.

TestRail: Cases
TestRail: Runs