Bug 10190: Fix patron_categories permission format

The x-koha-authorization was using 'parameters: catalogue' which the
Koha auth system interprets as a 'catalogue' subpermission within the
'parameters' module (which doesn't exist), causing a 403 for any user.

The correct format for the top-level 'catalogue' permission is
'catalogue: "1"', consistent with all other read-only API endpoints.

Sponsored-by: Glasgow Colleges Library Group <https://library.cityofglasgowcollege.ac.uk>
Signed-off-by: Michaela <michaela.sieber@kit.edu>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Pedro Amorim <pedro.amorim@openfifth.co.uk>
This commit is contained in:
Martin Renvoize 2026-02-27 10:10:51 +00:00 committed by Pedro Amorim
parent bc461cdde1
commit b760367e25
No known key found for this signature in database
GPG Key ID: 06B75BA7F3894D55
1 changed files with 1 additions and 1 deletions

View File

@ -51,7 +51,7 @@
$ref: "../swagger.yaml#/definitions/error"
x-koha-authorization:
permissions:
parameters: catalogue
catalogue: "1"
post:
x-mojo-to: Patrons::Categories#add
operationId: addCategory