<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Fri Feb 09 00:18:52 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[UXPROD-1828] action-based permissions</title>
                <link>https://folio-org.atlassian.net/browse/UXPROD-1828</link>
                <project id="10000" key="UXPROD">UX Product</project>
                    <description>&lt;p&gt;Quite a few of the new permissions describe a specific action, e.g. change due date (
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;UIU-582&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-582&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Permissions for change due date&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-582
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
) or cancel a request (
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UIREQ-110&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIREQ-110&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Permissions - Requests: Cancel requests (action-based)&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIREQ-110
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Open&lt;/span&gt;
            &lt;/span&gt;
).&lt;/p&gt;

&lt;p&gt;The backend APIs currently have permissions to allow a user to either edit (replace) a record or not.&lt;/p&gt;

&lt;p&gt;&lt;del&gt;In order for specific actions to be associated with specific permissions we need to decide upon a general approach to how we model (name of permission, how is it described in the API and how we describe what action it relates to).&lt;/del&gt;&lt;/p&gt;

&lt;p&gt;3-17-2021: Since this jira has been created, the practice in the community has been more hands off with these kinds of technical decisions, with the idea being that a team with capacity can explore a requirement and propose a technical solution that could meet their needs and then be considered by other teams as requirements in their  areas. This seems to be what is happening with permissions in this area, and there are explorations happening with things like permission overrides that are related to this need. Accordingly, the features that were blocked by this jira have been unblocked to make it easier to see that development on those features can and should proceed based on team and subject area priorities and capacity - &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c48911b54e1e6466b11f38c&quot; class=&quot;user-hover&quot; rel=&quot;5c48911b54e1e6466b11f38c&quot; data-account-id=&quot;5c48911b54e1e6466b11f38c&quot; accountid=&quot;5c48911b54e1e6466b11f38c&quot; rel=&quot;noreferrer&quot;&gt;Erin Nettifee&lt;/a&gt;&lt;/p&gt;</description>
                <environment></environment>
        <key id="10710">UXPROD-1828</key>
            <summary>action-based permissions</summary>
                <type id="10002" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium">New Feature</type>
                            <parent id="11697">UXPROD-1814</parent>
                                    <priority id="10002" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p3.svg">P3</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10000">Won&apos;t Do</resolution>
                                                        <assignee accountid="557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d">Jakub Skoczen</assignee>
                                                                <reporter accountid="63e2a2771b13d42998e4e706">Marc Johnson</reporter>
                                    <labels>
                            <label>cap-mvp</label>
                            <label>core</label>
                            <label>po-mvp</label>
                    </labels>
                <created>Mon, 17 Sep 2018 15:34:32 +0000</created>
                <updated>Thu, 14 Apr 2022 19:05:39 +0000</updated>
                            <resolved>Thu, 14 Apr 2022 19:05:39 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>8</watches>
                                                                <comments>
                                                            <comment id="13209" author="63e2a2771b13d42998e4e706" created="Mon, 17 Sep 2018 15:39:08 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5af5ed55244bc90a106063c7&quot; class=&quot;user-hover&quot; rel=&quot;5af5ed55244bc90a106063c7&quot; data-account-id=&quot;5af5ed55244bc90a106063c7&quot; accountid=&quot;5af5ed55244bc90a106063c7&quot; rel=&quot;noreferrer&quot;&gt;Cate Boerema&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt; At the moment, I&apos;ve described the cases where the user is performing an action. &lt;/p&gt;

&lt;p&gt;There are also some issues for being only able to select certain subsets of records, e.g. only open loans (
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UIU-622&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-622&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Permissions for viewing open loans in Users app loans view&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-622
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Draft&lt;/span&gt;
            &lt;/span&gt;
) or closed loans (
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UIU-623&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-623&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Permissions for viewing closed loans&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-623
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Draft&lt;/span&gt;
            &lt;/span&gt;
). Do those also fall into this, or should that be a separate question?&lt;/p&gt;</comment>
                                                            <comment id="13211" author="5af5ed55244bc90a106063c7" created="Mon, 17 Sep 2018 16:12:57 +0000"  >&lt;p&gt;Thanks &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=63e2a2771b13d42998e4e706&quot; class=&quot;user-hover&quot; rel=&quot;63e2a2771b13d42998e4e706&quot; data-account-id=&quot;63e2a2771b13d42998e4e706&quot; accountid=&quot;63e2a2771b13d42998e4e706&quot; rel=&quot;noreferrer&quot;&gt;Marc Johnson&lt;/a&gt;.  So you are working on this spike?  If so, please assign it to yourself.&lt;/p&gt;

&lt;blockquote&gt;&lt;p&gt;I&apos;ve described the cases where the user is performing an action&lt;/p&gt;&lt;/blockquote&gt;

&lt;p&gt;Is this documented somewhere?&lt;/p&gt;

&lt;blockquote&gt;&lt;p&gt;There are also some issues for being only able to select certain subsets of records, e.g. only open loans (
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UIU-622&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-622&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Permissions for viewing open loans in Users app loans view&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-622
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Draft&lt;/span&gt;
            &lt;/span&gt;
) or closed loans (
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UIU-623&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-623&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Permissions for viewing closed loans&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-623
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Draft&lt;/span&gt;
            &lt;/span&gt;
). Do those also fall into this, or should that be a separate question?&lt;/p&gt;&lt;/blockquote&gt;

&lt;p&gt;We can consider working this out to be part of this spike or create a new one.  If you think you can come up with a solution for both relatively quickly, let&apos;s just group them together.  If they are really distinct analyses and non-trivial, it probably makes sense to create a separate spike for the other question.&lt;/p&gt;</comment>
                                                            <comment id="13214" author="63e2a2771b13d42998e4e706" created="Mon, 17 Sep 2018 16:23:31 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5af5ed55244bc90a106063c7&quot; class=&quot;user-hover&quot; rel=&quot;5af5ed55244bc90a106063c7&quot; data-account-id=&quot;5af5ed55244bc90a106063c7&quot; accountid=&quot;5af5ed55244bc90a106063c7&quot; rel=&quot;noreferrer&quot;&gt;Cate Boerema&lt;/a&gt; I haven&apos;t really started working on this spike, I just thought it was worth raising and scoping (if that counts, then I can assign myself and mark it in progress?).&lt;/p&gt;

&lt;p&gt;Apologies for the confusion, I haven&apos;t documented these, I was only intending to refer to the few examples I&apos;ve seen, including &lt;tt&gt;change due date&lt;/tt&gt; and &lt;tt&gt;cancel request&lt;/tt&gt;. Which to me fall into the class of tasks that are actions performed on a record. I can try to list more examples here or in a document if that would be useful?&lt;/p&gt;

&lt;p&gt;I can suggest a potential approach here, if that would be useful? I don&apos;t think I can make the decision. From my perspective, I consider taking actions and which records I can view as distinct, but the technical solution might look so similar that it might belong here too.&lt;/p&gt;</comment>
                                                            <comment id="13217" author="5d1cd1e35e43080ce8bf881f" created="Wed, 19 Sep 2018 02:54:08 +0000"  >&lt;p&gt;Seems like there are roughly two ways to go here (I&apos;m further from being qualified to make the decision than Marc but figure this might help move it along). As I understand it, the concern is that right now we mostly have APIs and permissions around create/read/update/delete of various records and that doesn&apos;t really encompass more specific actions? &lt;/p&gt;

&lt;p&gt;We could extend the API to include per-field update permissions for some (or all) records and have the UI permissions be permission sets built out of these based on which fields are involved in the operation. However, it strikes me that things like changing a due date or checking in a book could well have more business logic associated with them and thus have richer semantics than merely being updates to a subset of fields. And I hope &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt; still agrees that business logic should be fully encoded in the APIs and the front end is just a way to surface these operations and data to the user?&lt;/p&gt;

&lt;p&gt;So I think we should instead have API endpoints for specific operations and permissions corresponding to them eg. &lt;tt&gt;/loans/45/checkin&lt;/tt&gt;. Then anything that checks in an item can go through that front-door where we might hang additional business logic from that isn&apos;t necessarily encompassed by updating a loan record in mod-circulation and will be consistent regardless of whether it&apos;s Stripes or another UI or NCIP or whatever doing the checkin.&lt;/p&gt;

&lt;p&gt;Indeed, seems we&apos;ve already started along this path--there is a specific endpoint for &lt;a href=&quot;https://github.com/folio-org/mod-circulation/blob/master/ramls/circulation.raml#L35&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;check-out-by-barcode&lt;/a&gt; and a &lt;a href=&quot;https://github.com/folio-org/mod-circulation/blob/master/descriptors/ModuleDescriptor-template.json#L470&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;permission set to go with it&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="13220" author="5af5ed55244bc90a106063c7" created="Wed, 19 Sep 2018 08:59:41 +0000"  >&lt;p&gt;Thanks &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=63e2a2771b13d42998e4e706&quot; class=&quot;user-hover&quot; rel=&quot;63e2a2771b13d42998e4e706&quot; data-account-id=&quot;63e2a2771b13d42998e4e706&quot; accountid=&quot;63e2a2771b13d42998e4e706&quot; rel=&quot;noreferrer&quot;&gt;Marc Johnson&lt;/a&gt; and &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5d1cd1e35e43080ce8bf881f&quot; class=&quot;user-hover&quot; rel=&quot;5d1cd1e35e43080ce8bf881f&quot; data-account-id=&quot;5d1cd1e35e43080ce8bf881f&quot; accountid=&quot;5d1cd1e35e43080ce8bf881f&quot; rel=&quot;noreferrer&quot;&gt;Jason Skomorowski&lt;/a&gt;.  I realize that these decisions can&apos;t be made unilaterally, but I think it&apos;s important that we assign the spike to someone for ownership of driving the decision.  Per discussion with &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt; yesterday, this should be assigned to you, Marc ��  &lt;/p&gt;

&lt;p&gt;It would be great if we could link up all the stories this blocks.  Some possibilities can be found in this list: &lt;a href=&quot;https://folio-org.atlassian.net/issues/?filter=10949&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://folio-org.atlassian.net/issues/?filter=10949&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="13222" author="63e2a2771b13d42998e4e706" created="Wed, 19 Sep 2018 15:33:29 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5af5ed55244bc90a106063c7&quot; class=&quot;user-hover&quot; rel=&quot;5af5ed55244bc90a106063c7&quot; data-account-id=&quot;5af5ed55244bc90a106063c7&quot; accountid=&quot;5af5ed55244bc90a106063c7&quot; rel=&quot;noreferrer&quot;&gt;Cate Boerema&lt;/a&gt; Thanks. I&apos;ve added the ones from that list that I think are blocked by this. &lt;/p&gt;

&lt;p&gt;I believe most of the requests ones are general enough to not be affected, however anything specific like cancel, close etc needs to be blocked by this.&lt;/p&gt;

&lt;p&gt;I don&apos;t know enough about the tags permissions (I think there are likely other challenges around those).&lt;/p&gt;

&lt;p&gt;Some of the other issues seem big enough that this might intersect with an aspect, but we may not want to block all of the work.&lt;/p&gt;</comment>
                                                            <comment id="13224" author="557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d" created="Thu, 20 Sep 2018 12:16:34 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Aff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; class=&quot;user-hover&quot; rel=&quot;557058:ff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; data-account-id=&quot;557058:ff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; accountid=&quot;557058:ff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; rel=&quot;noreferrer&quot;&gt;Michal Kuklis&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c38e8d616ac1e4f7cbc660a&quot; class=&quot;user-hover&quot; rel=&quot;5c38e8d616ac1e4f7cbc660a&quot; data-account-id=&quot;5c38e8d616ac1e4f7cbc660a&quot; accountid=&quot;5c38e8d616ac1e4f7cbc660a&quot; rel=&quot;noreferrer&quot;&gt;Kurt Nordstrom&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=63e2a2771b13d42998e4e706&quot; class=&quot;user-hover&quot; rel=&quot;63e2a2771b13d42998e4e706&quot; data-account-id=&quot;63e2a2771b13d42998e4e706&quot; accountid=&quot;63e2a2771b13d42998e4e706&quot; rel=&quot;noreferrer&quot;&gt;Marc Johnson&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5cf6c265e7d2310e9fc0c5ac&quot; class=&quot;user-hover&quot; rel=&quot;5cf6c265e7d2310e9fc0c5ac&quot; data-account-id=&quot;5cf6c265e7d2310e9fc0c5ac&quot; accountid=&quot;5cf6c265e7d2310e9fc0c5ac&quot; rel=&quot;noreferrer&quot;&gt;VBar&lt;/a&gt; Guys, we are going to meet today on Slack at 9 ET to discuss this.&lt;/p&gt;</comment>
                                                            <comment id="13226" author="5cf6c265e7d2310e9fc0c5ac" created="Thu, 20 Sep 2018 21:37:52 +0000"  >&lt;p&gt;I was unable to attend the discussion due to a prior commitment (saw the above too late anyways). I don&apos;t see the discussion on Slack. Did it happen, and if so, what were the outcomes?&lt;/p&gt;</comment>
                                                            <comment id="13228" author="63e2a2771b13d42998e4e706" created="Fri, 21 Sep 2018 11:26:48 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5cf6c265e7d2310e9fc0c5ac&quot; class=&quot;user-hover&quot; rel=&quot;5cf6c265e7d2310e9fc0c5ac&quot; data-account-id=&quot;5cf6c265e7d2310e9fc0c5ac&quot; accountid=&quot;5cf6c265e7d2310e9fc0c5ac&quot; rel=&quot;noreferrer&quot;&gt;VBar&lt;/a&gt; I have written some rough notes, I will publish them here when I have refined them a bit&lt;/p&gt;</comment>
                                                            <comment id="13231" author="615afd1cd9820f0070a09ef0" created="Mon, 1 Oct 2018 19:11:59 +0000"  >&lt;p&gt;We had a thought provoking conversation about this but didn&apos;t get to the point of making an implementation decision. Here are some rough notes from the discussion on 2018-09-20 with &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=63e2a2771b13d42998e4e706&quot; class=&quot;user-hover&quot; rel=&quot;63e2a2771b13d42998e4e706&quot; data-account-id=&quot;63e2a2771b13d42998e4e706&quot; accountid=&quot;63e2a2771b13d42998e4e706&quot; rel=&quot;noreferrer&quot;&gt;Marc Johnson&lt;/a&gt;, &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Aff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; class=&quot;user-hover&quot; rel=&quot;557058:ff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; data-account-id=&quot;557058:ff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; accountid=&quot;557058:ff6a9612-bb35-41b2-88a8-a5b66d0a41a0&quot; rel=&quot;noreferrer&quot;&gt;Michal Kuklis&lt;/a&gt;, &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt;, &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c38e8d616ac1e4f7cbc660a&quot; class=&quot;user-hover&quot; rel=&quot;5c38e8d616ac1e4f7cbc660a&quot; data-account-id=&quot;5c38e8d616ac1e4f7cbc660a&quot; accountid=&quot;5c38e8d616ac1e4f7cbc660a&quot; rel=&quot;noreferrer&quot;&gt;Kurt Nordstrom&lt;/a&gt;, and &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt;:  &lt;/p&gt;

&lt;ul&gt;
	&lt;li&gt;permissions so far have been pretty coarse:
	&lt;ul&gt;
		&lt;li&gt;per-record, per-endpoint&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
	&lt;li&gt;but now we want action-based stuff like checkout, renewal, etc
	&lt;ul&gt;
		&lt;li&gt;i.e. cancel request is really edit request, but maybe it shouldn&apos;t be&lt;/li&gt;
		&lt;li&gt;because a user should &lt;em&gt;only&lt;/em&gt; have cancel-request permission, not full edit-request permission&lt;/li&gt;
		&lt;li&gt;i.e. edit-foo permission requires giving full permission to change any field&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;examples:
	&lt;ul&gt;
		&lt;li&gt;renew with change due date&lt;/li&gt;
		&lt;li&gt;request edit without request cancel&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;option: introduce a named permission that hides/shows things in the UI
	&lt;ul&gt;
		&lt;li&gt;... but doesn&apos;t actually change the backend permissions&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;tags is related but should be considered out of scope here&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;currently, any fine-grained permission is defined in the UI ONLY
	&lt;ul&gt;
		&lt;li&gt;because there is no notion of it in the backend&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;options
	&lt;ul&gt;
		&lt;li&gt;1. api endpoint proliferation&lt;/li&gt;
		&lt;li&gt;2. use desired permissions
		&lt;ul&gt;
			&lt;li&gt;e.g. (change due date, renew), (read open loans, read closed loans)&lt;/li&gt;
			&lt;li&gt;how are these distinguishable???&lt;/li&gt;
			&lt;li&gt;would have to inspect the CQL (?!?!), or inspect the records returned, or ...?&lt;/li&gt;
		&lt;/ul&gt;
		&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;example: retrieve open loans for a particular user
	&lt;ul&gt;
		&lt;li&gt;currently: CQL query with two indexes (loan-status, user-id)&lt;/li&gt;
		&lt;li&gt;how to enforce permissions if the query doesn&apos;t include the status filter?&lt;/li&gt;
		&lt;li&gt;the desired permission should shape the result set&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;doing this at the API level with Okapi&apos;s path-based security is safer, but less flexible
	&lt;ul&gt;
		&lt;li&gt;WRT fetching, is it flexible enough?&lt;/li&gt;
		&lt;li&gt;if broad range of queries, maybe not&lt;/li&gt;
		&lt;li&gt;what about looking at loans through the context of inventory
		&lt;ul&gt;
			&lt;li&gt;e.g. listing all loans for an item?&lt;/li&gt;
			&lt;li&gt;should &quot;cannot view closed loans&quot; be the same permission in both places?&lt;/li&gt;
			&lt;li&gt;hmmmmmmm&lt;/li&gt;
		&lt;/ul&gt;
		&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;for fetching, server will add filter to query if the permission requires it
	&lt;ul&gt;
		&lt;li&gt;this creates a surface area for testing that is much broader...&lt;/li&gt;
		&lt;li&gt;(what about malicious queries???)&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;


&lt;ul&gt;
	&lt;li&gt;what about &quot;action&quot; params to an endpoint?
	&lt;ul&gt;
		&lt;li&gt;e.g. action = see open loans, or action = see closed loans&lt;/li&gt;
		&lt;li&gt;i.e. like a bind value&lt;/li&gt;
		&lt;li&gt;fine for viewing data; cuts down on endpoint proliferation&lt;/li&gt;
		&lt;li&gt;for editing data, maybe do need separate endpoints?
		&lt;ul&gt;
			&lt;li&gt;must constrain the shape of a PUT request&lt;/li&gt;
			&lt;li&gt;separate the endpoints completely? e.g. loan-edit no longer contains loan-status-change
			&lt;ul&gt;
				&lt;li&gt;loan-edit becomes separate from loan-status-edit&lt;/li&gt;
			&lt;/ul&gt;
			&lt;/li&gt;
			&lt;li&gt;this gets messy: requires doing a diff of the record in every PUT request
			&lt;ul&gt;
				&lt;li&gt;because PUT request must contains all fields, but can&apos;t change status&lt;/li&gt;
				&lt;li&gt;so must retrieve record and compare to make sure status doesn&apos;t change. ick.&lt;/li&gt;
			&lt;/ul&gt;
			&lt;/li&gt;
			&lt;li&gt;PATCH ...?&lt;/li&gt;
		&lt;/ul&gt;
		&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;
</comment>
                                                            <comment id="13235" author="5af5ed55244bc90a106063c7" created="Mon, 15 Oct 2018 14:47:44 +0000"  >&lt;p&gt;Moving this to P3, as with Marc&apos;s departure, we will likely not get this done in Q4.  If things change, we should bump this up in priority (along with all of the user stories that are blocked on it).&lt;/p&gt;</comment>
                                                            <comment id="13237" author="5c48911b54e1e6466b11f38c" created="Mon, 14 Dec 2020 19:42:29 +0000"  >&lt;p&gt;This feature is blocking other features that Duke would be really interested in (like separate permissions for back-dating a loan.) Is there someone who could give an update on how this might be progressed?&lt;/p&gt;</comment>
                                                            <comment id="13239" author="557058:a957226f-df85-4fc8-97f4-8b27a26029ed" created="Thu, 17 Dec 2020 21:02:11 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt;, &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=63e2a2771b13d42998e4e706&quot; class=&quot;user-hover&quot; rel=&quot;63e2a2771b13d42998e4e706&quot; data-account-id=&quot;63e2a2771b13d42998e4e706&quot; accountid=&quot;63e2a2771b13d42998e4e706&quot; rel=&quot;noreferrer&quot;&gt;Marc Johnson&lt;/a&gt; and &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt;:  I would be interested as well.  It is blocking several features and we have been talking about this for some time.  Thanks...&lt;/p&gt;</comment>
                                                            <comment id="13241" author="63e2a2771b13d42998e4e706" created="Fri, 18 Dec 2020 11:24:35 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c48911b54e1e6466b11f38c&quot; class=&quot;user-hover&quot; rel=&quot;5c48911b54e1e6466b11f38c&quot; data-account-id=&quot;5c48911b54e1e6466b11f38c&quot; accountid=&quot;5c48911b54e1e6466b11f38c&quot; rel=&quot;noreferrer&quot;&gt;Erin Nettifee&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Aa957226f-df85-4fc8-97f4-8b27a26029ed&quot; class=&quot;user-hover&quot; rel=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; data-account-id=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; accountid=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; rel=&quot;noreferrer&quot;&gt;Holly Mistlebauer&lt;/a&gt;&lt;/p&gt;

&lt;blockquote&gt;&lt;p&gt;This feature is blocking other features that Duke would be really interested in (like separate permissions for back-dating a loan.) Is there someone who could give an update on how this might be progressed?&lt;/p&gt;&lt;/blockquote&gt;

&lt;blockquote&gt;&lt;p&gt;I would be interested as well. It is blocking several features and we have been talking about this for some time. Thanks...&lt;/p&gt;&lt;/blockquote&gt;

&lt;p&gt;I&apos;m not aware of any active conversations about this topic at the moment (or for some time).&lt;/p&gt;

&lt;p&gt;I wrote this at a time when I thought that it made sense for FOLIO to try to put guidelines in place prior to undertaking work. In practice, this hasn&apos;t really worked. &lt;/p&gt;

&lt;p&gt;The recent changes in decision making process have acknowledged this and I&apos;m inclined to suggest we change strategy and instead come up with specific solutions to those features, that act as signposts and may inform platform wide guidance in the future.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5cf6c265e7d2310e9fc0c5ac&quot; class=&quot;user-hover&quot; rel=&quot;5cf6c265e7d2310e9fc0c5ac&quot; data-account-id=&quot;5cf6c265e7d2310e9fc0c5ac&quot; accountid=&quot;5cf6c265e7d2310e9fc0c5ac&quot; rel=&quot;noreferrer&quot;&gt;VBar&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5cf6c546b87c300f36eb7b9a&quot; class=&quot;user-hover&quot; rel=&quot;5cf6c546b87c300f36eb7b9a&quot; data-account-id=&quot;5cf6c546b87c300f36eb7b9a&quot; accountid=&quot;5cf6c546b87c300f36eb7b9a&quot; rel=&quot;noreferrer&quot;&gt;Craig McNally&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt; Does that align with your understanding of the decision making approach that has been agreed upon?&lt;/p&gt;

&lt;p&gt;There has been &lt;a href=&quot;https://folio-org.atlassian.net/wiki/display/DD/Overriding+blocks+in+mod-circulation&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;recent work&lt;/a&gt; by &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3A12031ab4-cff4-4571-b23b-43dcfc15a6ac&quot; class=&quot;user-hover&quot; rel=&quot;712020:12031ab4-cff4-4571-b23b-43dcfc15a6ac&quot; data-account-id=&quot;712020:12031ab4-cff4-4571-b23b-43dcfc15a6ac&quot; accountid=&quot;712020:12031ab4-cff4-4571-b23b-43dcfc15a6ac&quot; rel=&quot;noreferrer&quot;&gt;Alexander Kurash&lt;/a&gt; and &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3Af8cf10ec-9a7e-4703-b676-c1a8cf664b2a&quot; class=&quot;user-hover&quot; rel=&quot;712020:f8cf10ec-9a7e-4703-b676-c1a8cf664b2a&quot; data-account-id=&quot;712020:f8cf10ec-9a7e-4703-b676-c1a8cf664b2a&quot; accountid=&quot;712020:f8cf10ec-9a7e-4703-b676-c1a8cf664b2a&quot; rel=&quot;noreferrer&quot;&gt;Oleksandr Vidinieiev&lt;/a&gt; from the Vega team for overrides during check out that might form the basis of other action based permissions work in the future.&lt;/p&gt;</comment>
                                                            <comment id="13244" author="557058:a957226f-df85-4fc8-97f4-8b27a26029ed" created="Mon, 4 Jan 2021 13:49:48 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c48911b54e1e6466b11f38c&quot; class=&quot;user-hover&quot; rel=&quot;5c48911b54e1e6466b11f38c&quot; data-account-id=&quot;5c48911b54e1e6466b11f38c&quot; accountid=&quot;5c48911b54e1e6466b11f38c&quot; rel=&quot;noreferrer&quot;&gt;Erin Nettifee&lt;/a&gt;:  Hi Erin.  We discussed this feature at the Capacity Planning Team meeting this morning.  Given that it is ranked R4 by most libraries, and only R1 by Duke, it is not likely to be completed in 2021.  We have many features that are ranked R1 by most libraries that are still waiting to be planned.  Sorry I don&apos;t have better news.  Best, Holly&lt;/p&gt;</comment>
                                                            <comment id="13246" author="5c48911b54e1e6466b11f38c" created="Mon, 4 Jan 2021 13:52:43 +0000"  >&lt;p&gt;Thanks &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Aa957226f-df85-4fc8-97f4-8b27a26029ed&quot; class=&quot;user-hover&quot; rel=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; data-account-id=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; accountid=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; rel=&quot;noreferrer&quot;&gt;Holly Mistlebauer&lt;/a&gt; - from &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=63e2a2771b13d42998e4e706&quot; class=&quot;user-hover&quot; rel=&quot;63e2a2771b13d42998e4e706&quot; data-account-id=&quot;63e2a2771b13d42998e4e706&quot; accountid=&quot;63e2a2771b13d42998e4e706&quot; rel=&quot;noreferrer&quot;&gt;Marc Johnson&lt;/a&gt;&apos;s comment, it sounds like it might be possible still to unblock some of the individual features that are currently blocked by this one and move them forward if an institution had resources to do so. Is that a correct understanding?&lt;/p&gt;</comment>
                                                            <comment id="13248" author="557058:a957226f-df85-4fc8-97f4-8b27a26029ed" created="Mon, 15 Mar 2021 14:28:49 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c48911b54e1e6466b11f38c&quot; class=&quot;user-hover&quot; rel=&quot;5c48911b54e1e6466b11f38c&quot; data-account-id=&quot;5c48911b54e1e6466b11f38c&quot; accountid=&quot;5c48911b54e1e6466b11f38c&quot; rel=&quot;noreferrer&quot;&gt;Erin Nettifee&lt;/a&gt;:&#160; Please work with &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=63e2a2771b13d42998e4e706&quot; class=&quot;user-hover&quot; rel=&quot;63e2a2771b13d42998e4e706&quot; data-account-id=&quot;63e2a2771b13d42998e4e706&quot; accountid=&quot;63e2a2771b13d42998e4e706&quot; rel=&quot;noreferrer&quot;&gt;Marc Johnson&lt;/a&gt; to identify which of there features can be unblocked...&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UXPROD-1245&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UXPROD-1245&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Loans: One-time escalation of a user&amp;#39;s permissions&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium&quot; /&gt;
            UXPROD-1245
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Draft&lt;/span&gt;
            &lt;/span&gt;
 Loans: One-time escalation of a user&apos;s permissions&lt;/li&gt;
	&lt;li&gt;
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UXPROD-1839&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UXPROD-1839&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Cancel Request Permission (Action-Based)&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium&quot; /&gt;
            UXPROD-1839
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-current jira-macro-single-issue-export-pdf&quot;&gt;In Refinement&lt;/span&gt;
            &lt;/span&gt;
 Cancel Request Permission (Action-Based)&lt;/li&gt;
	&lt;li&gt;
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;UXPROD-1985&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UXPROD-1985&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Loans: Permissions (Action-based)&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium&quot; /&gt;
            UXPROD-1985
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 Loans: Permissions (Action-based)&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;Thanks...&lt;/p&gt;</comment>
                                                            <comment id="13250" author="63e2a2771b13d42998e4e706" created="Fri, 19 Mar 2021 12:10:19 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c48911b54e1e6466b11f38c&quot; class=&quot;user-hover&quot; rel=&quot;5c48911b54e1e6466b11f38c&quot; data-account-id=&quot;5c48911b54e1e6466b11f38c&quot; accountid=&quot;5c48911b54e1e6466b11f38c&quot; rel=&quot;noreferrer&quot;&gt;Erin Nettifee&lt;/a&gt; and I discussed this on Slack recently. &lt;/p&gt;

&lt;p&gt;I don&apos;t think that FOLIO is going to invest in a standard approach for these kinds of permissions. Hence we agreed to unblock all of the associated work and make decisions on a case by case basis.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Aa957226f-df85-4fc8-97f4-8b27a26029ed&quot; class=&quot;user-hover&quot; rel=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; data-account-id=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; accountid=&quot;557058:a957226f-df85-4fc8-97f4-8b27a26029ed&quot; rel=&quot;noreferrer&quot;&gt;Holly Mistlebauer&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt; Should we then close this feature?&lt;/p&gt;</comment>
                                                            <comment id="13252" author="5c48911b54e1e6466b11f38c" created="Thu, 14 Apr 2022 19:05:39 +0000"  >&lt;p&gt;I&apos;m going to make the decision to close this feature; leaving this open is confusing given the number of features that are related to it and the way that the project&apos;s approach to this stuff has changed over time.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10008">
                    <name>Defines</name>
                                                                <inwardlinks description="is defined by ">
                                        <issuelink>
            <issuekey id="48072">UIIN-800</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="11601">UXPROD-2576</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                                                <inwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="11144">UXPROD-1985</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="13102">UXPROD-1245</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="13672">UXPROD-1839</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10053" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Back End Estimate</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10124"><![CDATA[XXL < 30 days]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10144"><![CDATA[Core: Platform]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10014" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue key="$xmlutils.escape($text)">Platform, DevOps and Release Management</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10063" key="com.atlassian.jira.plugin.system.customfieldtypes:float">
                        <customfieldname>PO Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>105.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10064" key="com.atlassian.jira.plugin.system.customfieldtypes:textarea">
                        <customfieldname>PO Ranking Note</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>CB: Bumping this way up so it is ranked similarly to the user-facing features that require it (see links below)</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|hzywh3:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10071" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: 5Colleges (Full Jul 2021)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10226"><![CDATA[R4]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10067" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: Chalmers (Impl Aut 2019)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10206"><![CDATA[R4]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10068" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: Chicago (MVP Sum 2020)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10211"><![CDATA[R4]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10069" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: Cornell (Full Sum 2021)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10216"><![CDATA[R4]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10070" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: Duke (Full Sum 2021)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10218"><![CDATA[R1]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10074" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: GBV (MVP Sum 2020)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10241"><![CDATA[R4]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10078" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: Lehigh (MVP Summer 2020)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10261"><![CDATA[R4]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10085" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: MO State (MVP June 2020)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10295"><![CDATA[R2]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                <customfield id="customfield_10091" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: U of AL (MVP Oct 2020)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10325"><![CDATA[R2]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                    <customfield id="customfield_10076" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Rank: hbz (TBD)</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10251"><![CDATA[R4]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Mon, 17 Sep 2018 16:12:57 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>