From 8f6cee51eaa330c1b7032a149a1afa1c22881765 Mon Sep 17 00:00:00 2001
From: Martin Renvoize <martin.renvoize@openfifth.co.uk>
Date: Thu, 26 Feb 2026 17:07:38 +0000
Subject: [PATCH] Bug 10190: Fix permission mismatch on
 /circulation_rules/config endpoint

The config endpoint was gated on parameters: manage_circ_rules, while the
actual GET/PUT /circulation_rules endpoints require circulate:
circulate_remaining_permissions. Any user who can read/write circulation
rules should also be able to load the config that drives the UI.

Signed-off-by: Michaela <michaela.sieber@kit.edu>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Pedro Amorim <pedro.amorim@openfifth.co.uk>
---
 api/v1/swagger/paths/circulation_rules_config.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/v1/swagger/paths/circulation_rules_config.yaml b/api/v1/swagger/paths/circulation_rules_config.yaml
index b6f94e6918..6d8c7bf7f9 100644
--- a/api/v1/swagger/paths/circulation_rules_config.yaml
+++ b/api/v1/swagger/paths/circulation_rules_config.yaml
@@ -35,4 +35,4 @@
           $ref: "../swagger.yaml#/definitions/error"
     x-koha-authorization:
       permissions:
-        - parameters: manage_circ_rules
+        - circulate: circulate_remaining_permissions