invenio-app-ils 5.0.2__tar.gz → 6.0.0__tar.gz

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/CHANGES.rst

@@ -8,6 +8,15 @@
 Changes
 =======
 
+Version 6.0.0 (released 2025-10-03)
+
+- breaking change: permissions: turn permission that checks if user can see notifications into read permission
+- permissions: add backoffice readonly action
+
+Version 5.1.0 (released 2025-09-24)
+
+- eitem: add api methods to get eitems by `created_by` and `source` fields
+
 Version 5.0.2 (released 2025-08-20)
 
 - fix: ensure the invenio_app_ils configuration is loaded before cds_ils

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: invenio-app-ils
-Version: 5.0.2
+Version: 6.0.0
 Summary: Invenio Integrated Library System.
 Home-page: https://github.com/inveniosoftware/invenio-app-ils
 Author: CERN
@@ -103,6 +103,15 @@ https://invenioils.docs.cern.ch
 Changes
 =======
 
+Version 6.0.0 (released 2025-10-03)
+
+- breaking change: permissions: turn permission that checks if user can see notifications into read permission
+- permissions: add backoffice readonly action
+
+Version 5.1.0 (released 2025-09-24)
+
+- eitem: add api methods to get eitems by `created_by` and `source` fields
+
 Version 5.0.2 (released 2025-08-20)
 
 - fix: ensure the invenio_app_ils configuration is loaded before cds_ils

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/__init__.py

@@ -7,6 +7,6 @@
 
 """invenio-app-ils."""
 
-__version__ = "5.0.2"
+__version__ = "6.0.0"
 
 __all__ = ("__version__",)

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/acquisition/config.py

@@ -10,7 +10,11 @@ from invenio_indexer.api import RecordIndexer
 from invenio_records_rest.facets import terms_filter
 
 from invenio_app_ils.config import RECORDS_REST_MAX_RESULT_WINDOW
-from invenio_app_ils.permissions import backoffice_permission, superuser_permission
+from invenio_app_ils.permissions import (
+    backoffice_permission,
+    backoffice_read_permission,
+    superuser_permission,
+)
 
 from .api import ORDER_PID_FETCHER, ORDER_PID_MINTER, ORDER_PID_TYPE, Order
 from .search import OrderSearch
@@ -44,8 +48,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=superuser_permission,

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/circulation/config.py

@@ -41,7 +41,7 @@ from invenio_app_ils.items.api import (
 )
 from invenio_app_ils.patrons.api import patron_exists
 from invenio_app_ils.permissions import (
-    PatronOwnerPermission,
+    PatronOwnerReadPermission,
     authenticated_user_permission,
     backoffice_permission,
     loan_extend_circulation_permission,
@@ -254,7 +254,7 @@ ILS_CIRCULATION_RECORDS_REST_ENDPOINTS = dict(
         links_factory_imp="invenio_circulation.links:loan_links_factory",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=PatronOwnerPermission,
+        read_permission_factory_imp=PatronOwnerReadPermission,
         # auth via search_factory
         list_permission_factory_imp=authenticated_user_permission,
         create_permission_factory_imp=superuser_permission,

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/cli.py

@@ -1308,6 +1308,7 @@ def data(
     # Create roles to restrict access
     _run_command("roles create admin", verbose)
     _run_command("roles create librarian", verbose)
+    _run_command("roles create librarian-readonly", verbose)
 
     # Create users
     patron1_profile = {"full_name": "Yannic Vilma"}
@@ -1328,6 +1329,12 @@ def data(
         verbose,
     )
 
+    readonly_profile = {"full_name": "Ro Only"}
+    _run_command(
+        f"users create readonly@test.ch -a --password=123456 --profile '{json.dumps(readonly_profile)}'",
+        verbose,
+    )
+
     patron3_profile = {"full_name": "Medrod Tara"}
     _run_command(
         f"users create patron3@test.ch -a --password=123456 --profile '{json.dumps(patron3_profile)}'",
@@ -1350,6 +1357,7 @@ def data(
 
     # assign roles
     _run_command("roles add librarian@test.ch librarian", verbose)
+    _run_command("roles add readonly@test.ch librarian-readonly", verbose)
 
     # Index vocabularies
     vocabularies_dir = os.path.join(CURRENT_DIR, "vocabularies", "data")
@@ -1368,6 +1376,9 @@ def data(
     # Assign actions
     _run_command("access allow superuser-access role admin", verbose)
     _run_command("access allow ils-backoffice-access role librarian", verbose)
+    _run_command(
+        "access allow ils-backoffice-readonly-access role librarian-readonly", verbose
+    )
 
     # Create demo locations
     click.echo("Creating locations and internal locations...")

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/closures/views.py

@@ -16,7 +16,7 @@ from invenio_rest import ContentNegotiatedMethodView
 from invenio_app_ils.locations.api import LOCATION_PID_TYPE
 from invenio_app_ils.closures.serializers import closure_periods_response
 from invenio_app_ils.closures.api import get_closure_periods
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import backoffice_read_permission
 from invenio_app_ils.records.permissions import RecordPermission
 
 
@@ -53,7 +53,7 @@ class LocationClosurePeriodsResource(ContentNegotiatedMethodView):
         """Get the date ranges for which a location is closure based in the specified year"""
 
         factory = RecordPermission(record, "read")
-        if not factory.is_public() and not backoffice_permission().can():
+        if not factory.is_public() and not backoffice_read_permission().can():
             if not current_user.is_authenticated:
                 abort(401)
             abort(403)

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/config.py

@@ -91,9 +91,10 @@ from .patrons.api import (
 )
 from .patrons.search import PatronsSearch
 from .permissions import (
-    PatronOwnerPermission,
+    PatronOwnerReadPermission,
     authenticated_user_permission,
     backoffice_permission,
+    backoffice_read_permission,
     views_permissions_factory,
 )
 from .records.permissions import record_read_permission_factory
@@ -395,8 +396,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,
@@ -427,8 +428,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,
@@ -522,8 +523,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,
@@ -552,7 +553,7 @@ RECORDS_REST_ENDPOINTS = dict(
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
         read_permission_factory_imp=deny_all,
-        list_permission_factory_imp=backoffice_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=deny_all,
         update_permission_factory_imp=deny_all,
         delete_permission_factory_imp=deny_all,
@@ -584,7 +585,7 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=PatronOwnerPermission,
+        read_permission_factory_imp=PatronOwnerReadPermission,
         # auth via search_factory
         list_permission_factory_imp=authenticated_user_permission,
         create_permission_factory_imp=authenticated_user_permission,
@@ -1083,3 +1084,6 @@ THEME_FRONTPAGE = False
 PAGES_DEFAULT_TEMPLATE = "invenio_pages/default.html"
 # default app theme
 APP_THEME = ["semantic-ui"]
+
+# Site name.
+THEME_SITENAME = _("InvenioILS")

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/eitems/api.py

@@ -119,3 +119,35 @@ def eitem_event_builder(event, sender_app, obj=None, **kwargs):
     record = kwargs["record"]
     event.update(dict(eitem_pid=record["pid"], document_pid=record.get("document_pid")))
     return event
+
+
+def get_eitems_for_document_by_creator(document_pid, creator, case_insensitive=False):
+    """Find eitems by document pid and creator.
+
+    :param document_pid: The PID of the document of the eitems to search for.
+    :param creator: The creator to filter eitems by.
+    :param case_insensitive: Whether the creator match should be case insensitive.
+    """
+    eitem_search = current_app_ils.eitem_search_cls()
+    creator_match = eitem_search.search_by_document_pid(
+        document_pid=document_pid
+    ).filter(
+        "term",
+        created_by__value={"term": creator, "case_insensitive": case_insensitive},
+    )
+
+    return creator_match
+
+
+def get_eitems_for_document_by_source(document_pid, source, case_insensitive=False):
+    """Find eitems by document pid and source.
+
+    :param document_pid: The PID of the document of the eitems to search for.
+    :param source: The source to filter eitems by.
+    :param case_insensitive: Whether the source match should be case insensitive.
+    """
+    eitem_search = current_app_ils.eitem_search_cls()
+    source_match = eitem_search.search_by_document_pid(
+        document_pid=document_pid
+    ).filter("term", source={"value": source, "case_insensitive": case_insensitive})
+    return source_match

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/ill/config.py

@@ -11,7 +11,7 @@ from invenio_records_rest.facets import terms_filter
 
 from invenio_app_ils.config import RECORDS_REST_MAX_RESULT_WINDOW
 from invenio_app_ils.permissions import (
-    PatronOwnerPermission,
+    PatronOwnerReadPermission,
     authenticated_user_permission,
     backoffice_permission,
     superuser_permission,
@@ -76,7 +76,7 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=PatronOwnerPermission,
+        read_permission_factory_imp=PatronOwnerReadPermission,
         # auth via search_factory
         list_permission_factory_imp=authenticated_user_permission,
         create_permission_factory_imp=backoffice_permission,

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/notifications/views.py

@@ -38,7 +38,7 @@ def get_notifications_blueprint(_):
             "size": fields.Int(validate=[validate.Range(min=1, max=100)]),
         }
     )
-    @need_permissions("send-notification-to-patron")
+    @need_permissions("get-notifications-sent-to-patron")
     def get_notifications(
         recipient_user_id=None,
         pid_type=None,
@@ -69,7 +69,7 @@ def get_notifications_blueprint(_):
         return {"hits": notifications, "total": len(notifications)}
 
     @blueprint.route("/notifications/<int:id>")
-    @need_permissions("send-notification-to-patron")
+    @need_permissions("get-notifications-sent-to-patron")
     def get_notification(id):
         try:
             notification = NotificationsLogs.query.filter_by(id=id).one()

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/patrons/anonymization.py

@@ -170,7 +170,9 @@ def anonymize_patron_data(patron_pid, force=False):
         borrowing_request["patron"] = anonymous_patron_fields
         borrowing_request["patron_pid"] = anonymous_patron_fields["pid"]
         borrowing_request.commit()
-        anonymized_records[BORROWING_REQUEST_PID_TYPE]["records"].append(borrowing_request)
+        anonymized_records[BORROWING_REQUEST_PID_TYPE]["records"].append(
+            borrowing_request
+        )
         indices += 1
 
     DocumentRequestSearch = current_app_ils.document_request_search_cls

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/permissions.py

@@ -20,6 +20,7 @@ from invenio_app_ils.errors import InvalidLoanExtendError, LoanCheckoutByPatronF
 from invenio_app_ils.proxies import current_app_ils
 
 backoffice_access_action = action_factory("ils-backoffice-access")
+backoffice_readonly_access_action = action_factory("ils-backoffice-readonly-access")
 
 
 def need_permissions(action):
@@ -62,6 +63,11 @@ def backoffice_permission(*args, **kwargs):
     return Permission(backoffice_access_action)
 
 
+def backoffice_read_permission(*args, **kwargs):
+    """Return permission for backoffice (full or read-only) read access."""
+    return Permission(backoffice_access_action, backoffice_readonly_access_action)
+
+
 def superuser_permission(*args, **kwargs):
     """Return permission to allow only admins."""
     return Permission(superuser_access)
@@ -160,6 +166,18 @@ def loan_checkout_permission(*args, **kwargs):
     raise LoanCheckoutByPatronForbidden(int(loan["patron_pid"]), current_user.id)
 
 
+class PatronOwnerReadPermission(Permission):
+    """Return Permission to evaluate if the current user owns the record or has backoffice read access."""
+
+    def __init__(self, record):
+        """Constructor."""
+        super().__init__(
+            UserNeed(int(record["patron_pid"])),
+            backoffice_access_action,
+            backoffice_readonly_access_action,
+        )
+
+
 class PatronOwnerPermission(Permission):
     """Return Permission to evaluate if the current user owns the record."""
 
@@ -179,13 +197,15 @@ _is_backoffice_permission = [
     "circulation-loan-update-dates",
     "relations-create",
     "relations-delete",
-    "stats-most-loaned",
     "document-request-actions",
     "bucket-create",
     "ill-brwreq-patron-loan-create",
     "ill-brwreq-patron-loan-extension-accept",
     "ill-brwreq-patron-loan-extension-decline",
-    "send-notification-to-patron",
+]
+_is_backoffice_read_permission = [
+    "stats-most-loaned",
+    "get-notifications-sent-to-patron",
 ]
 _is_patron_owner_permission = [
     "document-request-decline",
@@ -199,6 +219,8 @@ def views_permissions_factory(action):
         return authenticated_user_permission()
     elif action in _is_backoffice_permission:
         return backoffice_permission()
+    elif action in _is_backoffice_read_permission:
+        return backoffice_read_permission()
     elif action in _is_patron_owner_permission:
         return PatronOwnerPermission
     elif action == "circulation-loan-checkout":

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/providers/config.py

@@ -10,7 +10,10 @@
 from invenio_records_rest.facets import terms_filter
 
 from invenio_app_ils.config import RECORDS_REST_MAX_RESULT_WINDOW
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import (
+    backoffice_permission,
+    backoffice_read_permission,
+)
 
 from .api import PROVIDER_PID_FETCHER, PROVIDER_PID_MINTER, PROVIDER_PID_TYPE, Provider
 from .indexer import ProviderIndexer
@@ -47,8 +50,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/records/permissions.py

@@ -12,7 +12,10 @@ from flask_principal import ActionNeed, RoleNeed, UserNeed
 from invenio_access import Permission, any_user
 from six import string_types
 
-from invenio_app_ils.permissions import backoffice_access_action
+from invenio_app_ils.permissions import (
+    backoffice_access_action,
+    backoffice_readonly_access_action,
+)
 
 create_records_action = ActionNeed("create-records")
 
@@ -68,7 +71,10 @@ class RecordPermission(Permission):
         if self.is_public():
             return [any_user]
         else:
-            return self.record_needs() + [backoffice_access_action]
+            return self.record_needs() + [
+                backoffice_readonly_access_action,
+                backoffice_access_action,
+            ]
 
     def record_explicit_restrictions(self):
         """Return the list of user ids/roles allowed for the given action."""

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/records/views.py

@@ -17,7 +17,7 @@ from invenio_rest import ContentNegotiatedMethodView
 from invenio_app_ils.documents.api import DOCUMENT_PID_TYPE
 from invenio_app_ils.eitems.api import EITEM_PID_TYPE
 from invenio_app_ils.errors import StatsError
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import backoffice_read_permission
 from invenio_app_ils.records.permissions import RecordPermission
 from invenio_app_ils.series.api import SERIES_PID_TYPE
 from invenio_app_ils.signals import file_downloaded, record_viewed
@@ -62,7 +62,7 @@ class DocumentStatsResource(ContentNegotiatedMethodView):
     def post(self, pid, record, **kwargs):
         """Send a signal to count record view for the record stats."""
         factory = RecordPermission(record, "read")
-        if not factory.is_public() and not backoffice_permission().can():
+        if not factory.is_public() and not backoffice_read_permission().can():
             if not current_user.is_authenticated:
                 abort(401)
             abort(403)

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils/search_permissions.py

@@ -13,7 +13,7 @@ from flask import current_app, g, has_request_context, request
 from invenio_search.engine import dsl
 
 from invenio_app_ils.errors import SearchQueryError, UnauthorizedSearchError
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import backoffice_read_permission
 
 
 def _get_user_provides():
@@ -30,7 +30,7 @@ def _get_user_provides():
 
 def search_filter_record_permissions():
     """Filter list of results by `_access` and `restricted` fields."""
-    if not has_request_context() or backoffice_permission().allows(g.identity):
+    if not has_request_context() or backoffice_read_permission().allows(g.identity):
         return dsl.Q()
 
     # A record is public if `restricted` field False or missing
@@ -120,7 +120,7 @@ def _filter_by_patron(patron_id, search, query_string=None):
 def _filter_by_current_patron(search, query_string=None):
     """Filter search results by patron_pid."""
     # if the logged in user is not librarian or admin, validate the query
-    if has_request_context() and not backoffice_permission().allows(g.identity):
+    if has_request_context() and not backoffice_read_permission().allows(g.identity):
         return _filter_by_patron(g.identity.id, search, query_string)
     return search, query_string
 

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: invenio-app-ils
-Version: 5.0.2
+Version: 6.0.0
 Summary: Invenio Integrated Library System.
 Home-page: https://github.com/inveniosoftware/invenio-app-ils
 Author: CERN
@@ -103,6 +103,15 @@ https://invenioils.docs.cern.ch
 Changes
 =======
 
+Version 6.0.0 (released 2025-10-03)
+
+- breaking change: permissions: turn permission that checks if user can see notifications into read permission
+- permissions: add backoffice readonly action
+
+Version 5.1.0 (released 2025-09-24)
+
+- eitem: add api methods to get eitems by `created_by` and `source` fields
+
 Version 5.0.2 (released 2025-08-20)
 
 - fix: ensure the invenio_app_ils configuration is loaded before cds_ils

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/invenio_app_ils.egg-info/entry_points.txt

@@ -11,6 +11,7 @@ vocabulary = invenio_app_ils.vocabularies.cli:vocabulary
 
 [invenio_access.actions]
 backoffice_access_action = invenio_app_ils.permissions:backoffice_access_action
+backoffice_readonly_access_action = invenio_app_ils.permissions:backoffice_readonly_access_action
 
 [invenio_assets.webpack]
 invenio_app_ils_theme = invenio_app_ils.webpack:theme

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/run-tests.sh

@@ -47,7 +47,10 @@ done
 function cleanup() {
     eval "$(docker-services-cli down --env)"
 }
-trap cleanup EXIT
+
+if [[ ${keep_services} -eq 0 ]]; then
+	trap cleanup EXIT
+fi
 
 python -m check_manifest
 python -m sphinx.cmd.build -qnNW docs docs/_build/html

{invenio_app_ils-5.0.2 → invenio_app_ils-6.0.0}/setup.cfg

@@ -173,6 +173,7 @@ invenio_pidstore.minters =
 	vocid = invenio_app_ils.vocabularies.api:vocabulary_pid_minter
 invenio_access.actions = 
 	backoffice_access_action = invenio_app_ils.permissions:backoffice_access_action
+	backoffice_readonly_access_action = invenio_app_ils.permissions:backoffice_readonly_access_action
 invenio_records.jsonresolver = 
 	ill_brw_req = invenio_app_ils.ill.jsonresolvers.borrowing_request_document
 	ill_provider = invenio_app_ils.ill.jsonresolvers.borrowing_request_provider