Skip to content

Conversation

@JakobMiesner
Copy link
Contributor

@JakobMiesner JakobMiesner commented Sep 23, 2025

Update the permission system to allow for readonly-librarians.

  • add backoffice_readonly_access_action and have it replace backoffice_access_action in read operations
    • Users with the backoffice_readonly_access_action can read everything that users with thebackoffice_access_action could read before
  • create PatronOwnerReadPermission and backoffice_read_permission that make use of backoffice_readonly_access_action
  • renamed send-notification-to-patron into get-notifications-sent-to-patron, as it is only used for reading notifications

closes: CERNDocumentServer/cds-ils#969

@JakobMiesner JakobMiesner force-pushed the feature/permissions/readonly-librarian branch 2 times, most recently from daf09b2 to 4f1b44f Compare September 24, 2025 14:27
* add `backoffice_readonly_access_action` and have it replace `backoffice_access_action` in read operations
   * Users with the `backoffice_readonly_access_action` can read everything that users with the `backoffice_access_action` could read before
* create `PatronOwnerReadPermission` and `backoffice_read_permission` that make use of `backoffice_readonly_access_action`
…s into read permssion

* renamed `send-notification-to-patron` into `get-notifications-sent-to-patron`
* declare it as backoffice read permission
@JakobMiesner JakobMiesner force-pushed the feature/permissions/readonly-librarian branch from 4f1b44f to 0a77e67 Compare September 24, 2025 14:43
@JakobMiesner JakobMiesner marked this pull request as ready for review September 24, 2025 15:02
Copy link
Contributor

@ntarocco ntarocco left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🚀

}
)
@need_permissions("send-notification-to-patron")
@need_permissions("get-notifications-sent-to-patron")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for renaming this, much more clear this way

@kpsherva kpsherva merged commit be39938 into inveniosoftware:master Sep 26, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Access token: implement read-only auth

3 participants