Requests (UXPROD-790)

[UXPROD-2757] Request count API (to display request counts to users who don't have permission to view requests) Created: 16/Oct/20  Updated: 10/Jan/23

Status: Draft
Project: UX Product
Components: None
Affects versions: None
Fix versions: None
Parent: Requests

Type: New Feature Priority: P4
Reporter: Cate Boerema (Inactive) Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original estimate: Not Specified

Issue links:
Defines
is defined by CIRC-954 Request count API so we can display c... Open
Relates
relates to MODFEE-93 Leaked HTTP Clients and Connection Ma... Closed
Epic Link: Requests
Development Team: Vega
PO Rank: 0
PO Ranking Note: 2020-12-07 CB: Making PO rank the same as the calculated total for now.
Rank: Chalmers (Impl Aut 2019): R5
Rank: Chicago (MVP Sum 2020): R4
Rank: Cornell (Full Sum 2021): R3
Rank: Duke (Full Sum 2021): R1
Rank: 5Colleges (Full Jul 2021): R4
Rank: GBV (MVP Sum 2020): R5
Rank: MO State (MVP June 2020): R4
Rank: U of AL (MVP Oct 2020): R4

 Description   

Current situation or problem: There are several places in FOLIO where we display request counts (Inventory item record, Users requests accordion, Users loans list and page, Check out etc). There is no way to display a request count to users that don't have permissions to view requests. The different apps have dealt with this differently:

  • Inventory - Shows the request count even if logged in user hasn't been given permission to view the requests app. We think this was accomplished by hiding the view requests permission in in the inventory permissions but then hiding the requests ui. This is a security loophole.
  • Check out - Doesn't display the request count if you don't have permission to view requests
  • Users:
    • Requests - ?
    • Loans - ?

In scope Create a request count API so we can display request counts to users who don't have permission to view requests.

Out of scope

Use case(s)
As a user who has inventory permissions but not requests permissions
I want to see the count of requests on an item
So that I can...

Proposed solution/stories

  • CIRC - Request count API so we can display counts when user doesn't have permissions for Requests
  • CIRCSTORE - Per Marc Johnson, we need this to support for above
  • RMB - Per Marc, we may also need something in RMB
  • UIIN - Use request count API to display the request count for items
  • UIU - Use request count API to display the request count for users and loans
  • UICHKOUT - Use request count API to display the request count for patrons
  • Permissions stories? - Should anyone be able to get the count of requests, or would we still want to have a permission for this API and include that permission in the permission sets for those activities? (I'm thinking it likely should be the latter)

Links to additional info

Questions



 Comments   
Comment by Holly Mistlebauer [ 07/Mar/22 ]

This feature is marked DRAFT until Brooks Travis has a chance to review it for validity.

Generated at Fri Feb 09 00:26:35 UTC 2024 using Jira 1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d.