Acquisitions permissions for managing items

Bug #1960511 reported by Galen Charlton
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Evergreen
Confirmed
Undecided
Unassigned

Bug Description

The stock Acquisitions profile has various permissions for managing items and volumes in the course of the acquisitions process, including UPDATE_VOLUME, UPDATE_COPY, DELETE_VOLUME, but not DELETE_COPY.

Without DELETE_COPY, somebody with that profile can create real items in the course of activating a PO, but then be unable to cancel a PO for a permanent reason because they lack the permission to delete the associated real items.

Is it sufficient to add DELETE_COPY to the stock Acquisitions profile? Or are there concerns that DELETE_COPY would be too broad to give to acquisitions clerks?

Evergreen master

Revision history for this message
Galen Charlton (gmc) wrote :

By the way, if the decision is that DELETE_COPY is too broad, that suggests defining a new permission that is checked specifically when deleting real items because of an order cancellation.

Revision history for this message
Tiffany Little (tslittle) wrote :

If it's possible to have a new permission that allows an acq user to cancel items and subsequently have real copies auto-deleted, but *not* affirmatively delete other copies in the catalog, that would be my vote. I'm a little leery of handing out DELETE_COPY to acq users just so they can conduct normal business, when that also gives them abilities that I wouldn't necessarily prefer they have re: other holdings in the catalog.

tags: added: acq permissions
Revision history for this message
Tiffany Little (tslittle) wrote :

Although now I see that DELETE_VOLUME is already part of the stock acq permissions, so hmm. To me those would seem to be tied together. So if DELETE_VOLUME should be part of acq perms, then DELETE_COPY should follow. Although ideally, IMO, neither one should be part of acq perms and there should be a more acq-specific flavor of perm to accomplish auto-deleting items. Something like CANCEL_LINEITEM?

Changed in evergreen:
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.