https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43486
Bug ID: 43486
Summary: Add permission-gated patron notification info to the
checkin hold.patron embed
Initiative type: ---
Sponsorship ---
status:
Product: Koha
Version: Main
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: REST API
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
Blocks: 42383
Target Milestone: ---
The checkin REST API (bug 24401) can embed the hold's patron via
hold.patron, and the Vue checkin page (bug 42383) uses it to render the
"Hold found" dialog. Two things are missing compared to the legacy
returns.pl dialog:
* The embedded patron is not gated by patron-information visibility. The
staff interface hides patron identity when the logged-in user
can_see_patrons_from() the patron's library returns false (the
borrowers => view_borrower_infos_from_any_libraries permission and the
ft_hide_patron_info library group feature). The API embed should honour
the same rule and redact the patron when the operator may not see it.
* There is no way to know, from the API, whether the patron will be
notified about the waiting hold and through which method ("Patron is
not notified." / "Main contact method:" in returns.pl), because the
patron's messaging preferences are not exposed.
This bug adds a permission-gated notification summary to the patron as
exposed through the checkin embeds, so consumers (starting with the Vue
checkin page) can display the same information the legacy page does
without leaking patron data.
Test plan:
1. Have a waiting-hold-on-checkin scenario for a patron
2. As a user who can see the patron, GET the checkin availability /
POST the checkin with the hold.patron embed
=> SUCCESS: the response includes the patron notification summary
3. As a user who cannot see patrons from that library
(view_borrower_infos_from_any_libraries not held, ft_hide_patron_info
group), repeat
=> SUCCESS: the patron identity/notification data is redacted
4. Sign off :-D
Referenced Bugs:
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42383
[Bug 42383] Migrate check-in page to Vue
--
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
