Acquisitions permissions for managing items
Bug #1960511 reported by
Galen Charlton
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Evergreen |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
The stock Acquisitions profile has various permissions for managing items and volumes in the course of the acquisitions process, including UPDATE_VOLUME, UPDATE_COPY, DELETE_VOLUME, but not DELETE_COPY.
Without DELETE_COPY, somebody with that profile can create real items in the course of activating a PO, but then be unable to cancel a PO for a permanent reason because they lack the permission to delete the associated real items.
Is it sufficient to add DELETE_COPY to the stock Acquisitions profile? Or are there concerns that DELETE_COPY would be too broad to give to acquisitions clerks?
Evergreen master
Changed in evergreen: | |
status: | New → Confirmed |
To post a comment you must log in.
By the way, if the decision is that DELETE_COPY is too broad, that suggests defining a new permission that is checked specifically when deleting real items because of an order cancellation.