From 78321c2ccc428ab11964fea6efad8d4d777209ae Mon Sep 17 00:00:00 2001
From: Markus Weigelt <markus.weigelt@slub-dresden.de>
Date: Tue, 30 Jun 2026 16:49:36 +0200
Subject: [PATCH] Add permissions to retrieve user and contributor name types

Grant users.item.get and inventory-storage.contributor-name-types.item.get
on the POST /jobs and /jobs/send handlers, the system user, and
system-user-permissions.csv, so the worker can resolve createdByUser and
contributor name types when building the EDIFACT order-email context.
---
 descriptors/ModuleDescriptor-template.json                 | 6 ++++++
 src/main/resources/permissions/system-user-permissions.csv | 2 ++
 2 files changed, 8 insertions(+)

diff --git a/descriptors/ModuleDescriptor-template.json b/descriptors/ModuleDescriptor-template.json
index ca76b5e7..a36e45af 100644
--- a/descriptors/ModuleDescriptor-template.json
+++ b/descriptors/ModuleDescriptor-template.json
@@ -87,6 +87,7 @@
             "data-export.config.collection.get",
             "feefineactions.collection.get",
             "finance.expense-classes.item.get",
+            "inventory-storage.contributor-name-types.item.get",
             "inventory-storage.holdings.item.get",
             "inventory-storage.identifier-types.item.get",
             "inventory-storage.locations.item.get",
@@ -99,6 +100,7 @@
             "orders-storage.titles.item.get",
             "transfers.collection.get",
             "users.collection.get",
+            "users.item.get",
             "users.item.post",
             "users.item.put",
             "email.message.post",
@@ -194,6 +196,7 @@
             "data-export.config.collection.get",
             "feefineactions.collection.get",
             "finance.expense-classes.item.get",
+            "inventory-storage.contributor-name-types.item.get",
             "inventory-storage.holdings.item.get",
             "inventory-storage.identifier-types.item.get",
             "inventory-storage.locations.item.get",
@@ -206,6 +209,7 @@
             "orders-storage.titles.item.get",
             "transfers.collection.get",
             "users.collection.get",
+            "users.item.get",
             "users.item.post",
             "users.item.put",
             "email.message.post",
@@ -460,6 +464,7 @@
         "data-export.config.collection.get",
         "feefineactions.collection.get",
         "finance.expense-classes.item.get",
+        "inventory-storage.contributor-name-types.item.get",
         "inventory-storage.holdings.item.get",
         "inventory-storage.identifier-types.item.get",
         "inventory-storage.locations.item.get",
@@ -472,6 +477,7 @@
         "orders-storage.titles.item.get",
         "transfers.collection.get",
         "users.collection.get",
+        "users.item.get",
         "users.item.post",
         "users.item.put",
         "tenant-addresses.item.get",
diff --git a/src/main/resources/permissions/system-user-permissions.csv b/src/main/resources/permissions/system-user-permissions.csv
index 5ac0be52..befd3f01 100644
--- a/src/main/resources/permissions/system-user-permissions.csv
+++ b/src/main/resources/permissions/system-user-permissions.csv
@@ -8,6 +8,7 @@ data-export.job.collection.get
 data-export.config.collection.get
 feefineactions.collection.get
 finance.expense-classes.item.get
+inventory-storage.contributor-name-types.item.get
 inventory-storage.holdings.item.get
 inventory-storage.identifier-types.item.get
 inventory-storage.locations.item.get
@@ -20,6 +21,7 @@ orders-storage.pieces.collection.get
 orders-storage.titles.item.get
 transfers.collection.get
 users.collection.get
+users.item.get
 users.item.post
 users.item.put
 tenant-addresses.item.get