Bug 10190: correction to x-koha-authorization on /circulation_rules/config

The config endpoint is used exclusively by the Circulation Triggers
Vue app, which is gated on parameters/manage_circ_rules. Using
acquisition/'*' and erm/1 was inconsistent copy-paste from an
unrelated endpoint and would 403 circ-rules admins while granting
access to unrelated module users.

Signed-off-by: Michaela <michaela.sieber@kit.edu>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Pedro Amorim <pedro.amorim@openfifth.co.uk>
This commit is contained in:
Martin Renvoize 2026-02-25 12:00:46 +00:00 committed by Pedro Amorim
parent 228bf75845
commit 8659f4e016
No known key found for this signature in database
GPG Key ID: 06B75BA7F3894D55
1 changed files with 1 additions and 2 deletions

View File

@ -35,5 +35,4 @@
$ref: "../swagger.yaml#/definitions/error"
x-koha-authorization:
permissions:
- acquisition: '*'
- erm: 1
- parameters: manage_circ_rules