From: Ben Shum <bshum@biblio.org>
Date: Tue, 24 Jul 2012 14:36:49 +0000 (-0400)
Subject: Remove retrieve permissions from org units
X-Git-Tag: sprint4-merge-nov22~4073
X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=bf836230020982a229b95dcf8ed3f47e401293a4;p=working%2FEvergreen.git

Remove retrieve permissions from org units

Noticeably broken for the new simplified pull list when org units were not
visible from the interface to users without the following permissions:

CREATE_ORG_UNIT
UPDATE_ORG_UNIT
DELETE_ORG_UNIT

Since regular staff accounts would never be given any of these permissions
and nothing really secretive is included in org unit lookup, this change
removes those permissionas being required for retrieve.

Signed-off-by: Ben Shum <bshum@biblio.org>
Signed-off-by: Lebbeous Fogle-Weekley <lebbeous@esilibrary.com>
---

diff --git a/Open-ILS/examples/fm_IDL.xml b/Open-ILS/examples/fm_IDL.xml
index a6033480e4..780751fc6e 100644
--- a/Open-ILS/examples/fm_IDL.xml
+++ b/Open-ILS/examples/fm_IDL.xml
@@ -5278,10 +5278,7 @@ SELECT  usr,
         <permacrud xmlns="http://open-ils.org/spec/opensrf/IDL/permacrud/v1">
             <actions>
                 <create permission="CREATE_ORG_UNIT" context_field="parent_ou"/>
-                <retrieve permission="CREATE_ORG_UNIT UPDATE_ORG_UNIT DELETE_ORG_UNIT">
-                    <context field="id"/>
-                    <context field="parent_ou"/>
-				</retrieve>
+                <retrieve />
                 <update permission="UPDATE_ORG_UNIT" context_field="id"/>
                 <delete permission="DELETE_ORG_UNIT" context_field="parent_ou"/>
             </actions>