LP#1873048: scoped retrieve perm for booking resources too user/jeffdavis/lp1873048-lp1835127-booking-perms
authorJeff Davis <jdavis@sitka.bclibraries.ca>
Wed, 29 Apr 2020 17:48:52 +0000 (10:48 -0700)
committerJeff Davis <jdavis@sitka.bclibraries.ca>
Wed, 29 Apr 2020 17:48:52 +0000 (10:48 -0700)
Signed-off-by: Jeff Davis <jdavis@sitka.bclibraries.ca>
Open-ILS/examples/fm_IDL.xml

index 9f8e078..b1192eb 100644 (file)
@@ -5043,7 +5043,7 @@ SELECT  usr,
                <permacrud xmlns="http://open-ils.org/spec/opensrf/IDL/permacrud/v1">
                        <actions>
                                <create permission="ADMIN_BOOKING_RESOURCE" context_field='owner'/>
-                               <retrieve/>
+                               <retrieve permission="ADMIN_BOOKING_RESOURCE" context_field='owner'/>
                                <update permission="ADMIN_BOOKING_RESOURCE" context_field='owner'/>
                                <delete permission="ADMIN_BOOKING_RESOURCE" context_field='owner'/>
                        </actions>