web client: Insufficient permissions causes actions to fail without any feedback to the user
Bug #1526185 reported by
Kathy Lussier
This bug affects 3 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Evergreen |
Fix Released
|
Medium
|
Unassigned |
Bug Description
In the web client, if staff does not have permission to perform an action, the action will fail without any feedback to the user. I tested the following actions with an account that did not have sufficient permissions:
COPY_ALERT_
COPY_STATUS_
PATRON_
UPDATE_HOLD
In every case, the user never received a message saying why the action failed and did not receive a login box asking for credentials of an account that could perform the action. In several cases, it wasn't even clear that the action had failed
Changed in evergreen: | |
assignee: | nobody → Kyle Huckins (khuckins) |
Changed in evergreen: | |
milestone: | none → 2.12-beta |
status: | New → Confirmed |
Changed in evergreen: | |
milestone: | 2.12-beta → 2.12-rc |
Changed in evergreen: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
Bill Erickson and I have a collab branch here that resolves this: git.evergreen- ils.org/ ?p=working/ Evergreen. git;a=shortlog; h=refs/ heads/collab/ khuckins/ lp1526185- permission- credentials- prompt
http://
Evergreen should now notice whenever an action fails due to permission failure, and the recently implemented operator change dialog will be brought up(without the login type field), along with a message as to what permission failed, and a human-readable message summarising the issue. Input of authorized credentials will log you in as the authorized user, re-attempt the action, and then return you to your user.