Permission issue in Receive Shipment feature

Bug #2055089 reported by Llewellyn Marshall
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Evergreen
Fix Committed
Medium
Unassigned
3.11
Fix Committed
Medium
Unassigned

Bug Description

Evergreen 3.11.1

Staff have been unable to use the Receive Shipment feature in the Acquisitions module. When they attempt to scan a barcode pulled from the DESADV EDI message, they get this error: “No container found with barcode…” However, our global admin account was able to successfully receive a shipment. From that, we deduced that it was most likely a permission issue.

We looked into the FM_IDL and found that there are MANAGE_SHIPMENT_NOTIFICATION and VIEW_SHIPMENT_NOTIFICATION permissions required for retrieving and editing shipment notifications, however, these permissions were missing from the SQL upgrade scripts and 950 data seed files. The feature worked once the permissions were added and mapped to our staff permission groups.

I'm going to create a patch to add these permissions.

Revision history for this message
Llewellyn Marshall (lbmarshallv) wrote :
tags: added: pullrequest
Revision history for this message
Galen Charlton (gmc) wrote :

Took a quick look - in the change to 950.data.seed-values.sql, the ID that's the first parameter of oils_i18n_gettext() does not match the ID assigned for the permission as a whole.

For the upgrade script, I suggest adding a "WHERE NOT EXISTS (SELECT 1 FROM permission.perm_list WHERE code = 'XXX')" clause to each insert statement similar to what's going on in 1401.data.lp2051140_missing_bucket_perms.sql. That way, the update will not error out for anybody who may have manually added the missing permissions.

Changed in evergreen:
status: New → Confirmed
importance: Undecided → Medium
tags: added: acq-edi
tags: added: needswork
removed: pullrequest
tags: added: permissions
tags: added: pullrequest
removed: needswork
tags: added: signedoff
Revision history for this message
Terran McCanna (tmccanna) wrote :

Thanks, Llewellyn!

Tested by the New Developers Working Group. Sign off branch is at: https://git.evergreen-ils.org/?p=working/Evergreen.git;a=commit;h=25e5aa7d109b6828612d5321fdb3a672fe2bfa5c

Galen Charlton (gmc)
Changed in evergreen:
assignee: nobody → Galen Charlton (gmc)
milestone: none → 3.12.4
Revision history for this message
Galen Charlton (gmc) wrote :

Pushed down to rel_3_11. Thanks, Llewellyn, Terran, Steven, and Michele!

Changed in evergreen:
assignee: Galen Charlton (gmc) → nobody
status: Confirmed → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.