invenio-app-ils 5.1.0__tar.gz → 6.1.0__tar.gz

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/CHANGES.rst

@@ -8,6 +8,19 @@
 Changes
 =======
 
+Version 6.1.0 (released 2025-10-05)
+
+- fix: make terms query that gets eitems by creator use correct keyword
+- stats: record change ids only contain `user_id` when it is not None
+- global: include python files inside invenio_app_ils in manifest
+- stats: move file `test_stats` into folder for stats
+- stats: add stats to track ILSRecord insertions, deletions and updates
+
+Version 6.0.0 (released 2025-10-03)
+
+- breaking change: permissions: turn permission that checks if user can see notifications into read permission
+- permissions: add backoffice readonly action
+
 Version 5.1.0 (released 2025-09-24)
 
 - eitem: add api methods to get eitems by `created_by` and `source` fields

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/MANIFEST.in

@@ -64,6 +64,7 @@ recursive-include invenio_app_ils *.ttf
 recursive-include invenio_app_ils *.woff
 recursive-include invenio_app_ils *.woff2
 recursive-include invenio_app_ils *.config
+recursive-include invenio_app_ils *.py
 recursive-include tests *.py
 recursive-include tests *.json
 recursive-include tests *.html

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: invenio-app-ils
-Version: 5.1.0
+Version: 6.1.0
 Summary: Invenio Integrated Library System.
 Home-page: https://github.com/inveniosoftware/invenio-app-ils
 Author: CERN
@@ -103,6 +103,19 @@ https://invenioils.docs.cern.ch
 Changes
 =======
 
+Version 6.1.0 (released 2025-10-05)
+
+- fix: make terms query that gets eitems by creator use correct keyword
+- stats: record change ids only contain `user_id` when it is not None
+- global: include python files inside invenio_app_ils in manifest
+- stats: move file `test_stats` into folder for stats
+- stats: add stats to track ILSRecord insertions, deletions and updates
+
+Version 6.0.0 (released 2025-10-03)
+
+- breaking change: permissions: turn permission that checks if user can see notifications into read permission
+- permissions: add backoffice readonly action
+
 Version 5.1.0 (released 2025-09-24)
 
 - eitem: add api methods to get eitems by `created_by` and `source` fields

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/__init__.py

@@ -7,6 +7,6 @@
 
 """invenio-app-ils."""
 
-__version__ = "5.1.0"
+__version__ = "6.1.0"
 
 __all__ = ("__version__",)

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/acquisition/config.py

@@ -10,7 +10,11 @@ from invenio_indexer.api import RecordIndexer
 from invenio_records_rest.facets import terms_filter
 
 from invenio_app_ils.config import RECORDS_REST_MAX_RESULT_WINDOW
-from invenio_app_ils.permissions import backoffice_permission, superuser_permission
+from invenio_app_ils.permissions import (
+    backoffice_permission,
+    backoffice_read_permission,
+    superuser_permission,
+)
 
 from .api import ORDER_PID_FETCHER, ORDER_PID_MINTER, ORDER_PID_TYPE, Order
 from .search import OrderSearch
@@ -44,8 +48,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=superuser_permission,

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/circulation/config.py

@@ -41,7 +41,7 @@ from invenio_app_ils.items.api import (
 )
 from invenio_app_ils.patrons.api import patron_exists
 from invenio_app_ils.permissions import (
-    PatronOwnerPermission,
+    PatronOwnerReadPermission,
     authenticated_user_permission,
     backoffice_permission,
     loan_extend_circulation_permission,
@@ -254,7 +254,7 @@ ILS_CIRCULATION_RECORDS_REST_ENDPOINTS = dict(
         links_factory_imp="invenio_circulation.links:loan_links_factory",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=PatronOwnerPermission,
+        read_permission_factory_imp=PatronOwnerReadPermission,
         # auth via search_factory
         list_permission_factory_imp=authenticated_user_permission,
         create_permission_factory_imp=superuser_permission,

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/cli.py

@@ -1308,6 +1308,7 @@ def data(
     # Create roles to restrict access
     _run_command("roles create admin", verbose)
     _run_command("roles create librarian", verbose)
+    _run_command("roles create librarian-readonly", verbose)
 
     # Create users
     patron1_profile = {"full_name": "Yannic Vilma"}
@@ -1328,6 +1329,12 @@ def data(
         verbose,
     )
 
+    readonly_profile = {"full_name": "Ro Only"}
+    _run_command(
+        f"users create readonly@test.ch -a --password=123456 --profile '{json.dumps(readonly_profile)}'",
+        verbose,
+    )
+
     patron3_profile = {"full_name": "Medrod Tara"}
     _run_command(
         f"users create patron3@test.ch -a --password=123456 --profile '{json.dumps(patron3_profile)}'",
@@ -1350,6 +1357,7 @@ def data(
 
     # assign roles
     _run_command("roles add librarian@test.ch librarian", verbose)
+    _run_command("roles add readonly@test.ch librarian-readonly", verbose)
 
     # Index vocabularies
     vocabularies_dir = os.path.join(CURRENT_DIR, "vocabularies", "data")
@@ -1368,6 +1376,9 @@ def data(
     # Assign actions
     _run_command("access allow superuser-access role admin", verbose)
     _run_command("access allow ils-backoffice-access role librarian", verbose)
+    _run_command(
+        "access allow ils-backoffice-readonly-access role librarian-readonly", verbose
+    )
 
     # Create demo locations
     click.echo("Creating locations and internal locations...")

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/closures/views.py

@@ -16,7 +16,7 @@ from invenio_rest import ContentNegotiatedMethodView
 from invenio_app_ils.locations.api import LOCATION_PID_TYPE
 from invenio_app_ils.closures.serializers import closure_periods_response
 from invenio_app_ils.closures.api import get_closure_periods
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import backoffice_read_permission
 from invenio_app_ils.records.permissions import RecordPermission
 
 
@@ -53,7 +53,7 @@ class LocationClosurePeriodsResource(ContentNegotiatedMethodView):
         """Get the date ranges for which a location is closure based in the specified year"""
 
         factory = RecordPermission(record, "read")
-        if not factory.is_public() and not backoffice_permission().can():
+        if not factory.is_public() and not backoffice_read_permission().can():
             if not current_user.is_authenticated:
                 abort(401)
             abort(403)

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/config.py

@@ -1,6 +1,6 @@
 # -*- coding: utf-8 -*-
 #
-# Copyright (C) 2018-2020 CERN.
+# Copyright (C) 2018-2025 CERN.
 #
 # invenio-app-ils is free software; you can redistribute it and/or modify it
 # under the terms of the MIT License; see LICENSE file for more details.
@@ -15,6 +15,7 @@ You overwrite and set instance-specific configuration by either:
 
 import datetime
 from datetime import timedelta
+from functools import partial
 
 from celery.schedules import crontab
 from invenio_accounts.config import (
@@ -24,7 +25,7 @@ from invenio_records_rest.facets import terms_filter
 from invenio_records_rest.utils import allow_all, deny_all
 from invenio_stats.aggregations import StatAggregator
 from invenio_stats.processors import EventsIndexer
-from invenio_stats.queries import ESTermsQuery
+from invenio_stats.queries import DateHistogramQuery, ESTermsQuery
 
 from invenio_app_ils.document_requests.indexer import DocumentRequestIndexer
 from invenio_app_ils.documents.indexer import DocumentIndexer
@@ -41,6 +42,7 @@ from invenio_app_ils.literature.search import LiteratureSearch
 from invenio_app_ils.locations.indexer import LocationIndexer
 from invenio_app_ils.patrons.indexer import PatronIndexer
 from invenio_app_ils.series.indexer import SeriesIndexer
+from invenio_app_ils.stats.event_builders import ils_record_changed_event_builder
 from invenio_app_ils.vocabularies.indexer import VocabularyIndexer
 
 from .document_requests.api import (
@@ -91,9 +93,11 @@ from .patrons.api import (
 )
 from .patrons.search import PatronsSearch
 from .permissions import (
-    PatronOwnerPermission,
+    PatronOwnerReadPermission,
     authenticated_user_permission,
     backoffice_permission,
+    backoffice_read_permission,
+    superuser_permission,
     views_permissions_factory,
 )
 from .records.permissions import record_read_permission_factory
@@ -233,12 +237,20 @@ CELERY_BEAT_SCHEDULE = {
     "stats-process-events": {
         "task": "invenio_stats.tasks.process_events",
         "schedule": timedelta(minutes=30),
-        "args": [("record-view", "file-download")],
+        "args": [
+            (
+                "record-view",
+                "file-download",
+                "ils-record-changes-updates",
+                "ils-record-changes-insertions",
+                "ils-record-changes-deletions",
+            )
+        ],
     },
     "stats-aggregate-events": {
         "task": "invenio_stats.tasks.aggregate_events",
         "schedule": timedelta(hours=3),
-        "args": [("record-view-agg", "file-download-agg")],
+        "args": [("record-view-agg", "file-download-agg", "ils-record-changes-agg")],
     },
     "clean_locations_past_closures_exceptions": {
         "task": (
@@ -395,8 +407,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,
@@ -427,8 +439,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,
@@ -522,8 +534,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,
@@ -552,7 +564,7 @@ RECORDS_REST_ENDPOINTS = dict(
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
         read_permission_factory_imp=deny_all,
-        list_permission_factory_imp=backoffice_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=deny_all,
         update_permission_factory_imp=deny_all,
         delete_permission_factory_imp=deny_all,
@@ -584,7 +596,7 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=PatronOwnerPermission,
+        read_permission_factory_imp=PatronOwnerReadPermission,
         # auth via search_factory
         list_permission_factory_imp=authenticated_user_permission,
         create_permission_factory_imp=authenticated_user_permission,
@@ -920,6 +932,57 @@ STATS_EVENTS = {
             "suffix": "%Y-%m",
         },
     },
+    "ils-record-changes-updates": {
+        "signal": "invenio_records.signals.after_record_update",
+        "templates": "invenio_app_ils.stats.templates.events.ils_record_changes",
+        "event_builders": [
+            partial(ils_record_changed_event_builder, method="update"),
+            "invenio_app_ils.stats.event_builders.add_librarian_user_id_to_event",
+            "invenio_app_ils.stats.event_builders.add_record_pid_to_event",
+        ],
+        "cls": EventsIndexer,
+        "params": {
+            "preprocessors": [
+                "invenio_app_ils.stats.processors.add_record_change_ids",
+            ],
+            "double_click_window": 0,
+            "suffix": "%Y",
+        },
+    },
+    "ils-record-changes-insertions": {
+        "signal": "invenio_records.signals.after_record_insert",
+        "templates": "invenio_app_ils.stats.templates.events.ils_record_changes",
+        "event_builders": [
+            partial(ils_record_changed_event_builder, method="insert"),
+            "invenio_app_ils.stats.event_builders.add_librarian_user_id_to_event",
+            "invenio_app_ils.stats.event_builders.add_record_pid_to_event",
+        ],
+        "cls": EventsIndexer,
+        "params": {
+            "preprocessors": [
+                "invenio_app_ils.stats.processors.add_record_change_ids",
+            ],
+            "double_click_window": 0,
+            "suffix": "%Y",
+        },
+    },
+    "ils-record-changes-deletions": {
+        "signal": "invenio_records.signals.after_record_delete",
+        "templates": "invenio_app_ils.stats.templates.events.ils_record_changes",
+        "event_builders": [
+            partial(ils_record_changed_event_builder, method="delete"),
+            "invenio_app_ils.stats.event_builders.add_librarian_user_id_to_event",
+            "invenio_app_ils.stats.event_builders.add_record_pid_to_event",
+        ],
+        "cls": EventsIndexer,
+        "params": {
+            "preprocessors": [
+                "invenio_app_ils.stats.processors.add_record_change_ids",
+            ],
+            "double_click_window": 0,
+            "suffix": "%Y",
+        },
+    },
 }
 
 STATS_AGGREGATIONS = {
@@ -966,6 +1029,19 @@ STATS_AGGREGATIONS = {
             ),
         ),
     ),
+    "ils-record-changes-agg": dict(
+        templates="invenio_app_ils.stats.templates.aggregations.ils_record_changes",
+        cls=StatAggregator,
+        params=dict(
+            event="ils-record-changes",
+            field="aggregation_id",
+            interval="day",
+            index_interval="year",
+            copy_fields=dict(pid_type="pid_type", method="method", user_id="user_id"),
+            metric_fields=dict(),
+            query_modifiers=[],
+        ),
+    ),
 }
 
 STATS_QUERIES = {
@@ -1002,6 +1078,44 @@ STATS_QUERIES = {
             ),
         ),
     ),
+    "ils-record-changes": dict(
+        cls=DateHistogramQuery,
+        permission_factory=backoffice_read_permission,
+        params=dict(
+            index="stats-ils-record-changes",
+            copy_fields=dict(
+                pid_type="pid_type",
+                method="method",
+            ),
+            required_filters=dict(
+                pid_type="pid_type",
+                method="method",
+            ),
+            metric_fields=dict(
+                count=("sum", "count", {}),
+            ),
+        ),
+    ),
+    "ils-record-changes-per-user": dict(
+        cls=ESTermsQuery,
+        permission_factory=superuser_permission,
+        params=dict(
+            index="stats-ils-record-changes",
+            copy_fields=dict(
+                pid_type="pid_type",
+                method="method",
+                user_id="user_id",
+            ),
+            required_filters=dict(
+                pid_type="pid_type",
+                method="method",
+            ),
+            metric_fields=dict(
+                count=("sum", "count", {}),
+            ),
+            aggregated_fields=["user_id"],
+        ),
+    ),
 }
 
 # List of available vocabularies

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/eitems/api.py

@@ -133,7 +133,7 @@ def get_eitems_for_document_by_creator(document_pid, creator, case_insensitive=F
         document_pid=document_pid
     ).filter(
         "term",
-        created_by__value={"term": creator, "case_insensitive": case_insensitive},
+        created_by__value={"value": creator, "case_insensitive": case_insensitive},
     )
 
     return creator_match

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/ill/config.py

@@ -11,7 +11,7 @@ from invenio_records_rest.facets import terms_filter
 
 from invenio_app_ils.config import RECORDS_REST_MAX_RESULT_WINDOW
 from invenio_app_ils.permissions import (
-    PatronOwnerPermission,
+    PatronOwnerReadPermission,
     authenticated_user_permission,
     backoffice_permission,
     superuser_permission,
@@ -76,7 +76,7 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=PatronOwnerPermission,
+        read_permission_factory_imp=PatronOwnerReadPermission,
         # auth via search_factory
         list_permission_factory_imp=authenticated_user_permission,
         create_permission_factory_imp=backoffice_permission,

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/notifications/views.py

@@ -38,7 +38,7 @@ def get_notifications_blueprint(_):
             "size": fields.Int(validate=[validate.Range(min=1, max=100)]),
         }
     )
-    @need_permissions("send-notification-to-patron")
+    @need_permissions("get-notifications-sent-to-patron")
     def get_notifications(
         recipient_user_id=None,
         pid_type=None,
@@ -69,7 +69,7 @@ def get_notifications_blueprint(_):
         return {"hits": notifications, "total": len(notifications)}
 
     @blueprint.route("/notifications/<int:id>")
-    @need_permissions("send-notification-to-patron")
+    @need_permissions("get-notifications-sent-to-patron")
     def get_notification(id):
         try:
             notification = NotificationsLogs.query.filter_by(id=id).one()

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/patrons/anonymization.py

@@ -170,7 +170,9 @@ def anonymize_patron_data(patron_pid, force=False):
         borrowing_request["patron"] = anonymous_patron_fields
         borrowing_request["patron_pid"] = anonymous_patron_fields["pid"]
         borrowing_request.commit()
-        anonymized_records[BORROWING_REQUEST_PID_TYPE]["records"].append(borrowing_request)
+        anonymized_records[BORROWING_REQUEST_PID_TYPE]["records"].append(
+            borrowing_request
+        )
         indices += 1
 
     DocumentRequestSearch = current_app_ils.document_request_search_cls

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/permissions.py

@@ -20,6 +20,7 @@ from invenio_app_ils.errors import InvalidLoanExtendError, LoanCheckoutByPatronF
 from invenio_app_ils.proxies import current_app_ils
 
 backoffice_access_action = action_factory("ils-backoffice-access")
+backoffice_readonly_access_action = action_factory("ils-backoffice-readonly-access")
 
 
 def need_permissions(action):
@@ -62,6 +63,11 @@ def backoffice_permission(*args, **kwargs):
     return Permission(backoffice_access_action)
 
 
+def backoffice_read_permission(*args, **kwargs):
+    """Return permission for backoffice (full or read-only) read access."""
+    return Permission(backoffice_access_action, backoffice_readonly_access_action)
+
+
 def superuser_permission(*args, **kwargs):
     """Return permission to allow only admins."""
     return Permission(superuser_access)
@@ -160,6 +166,18 @@ def loan_checkout_permission(*args, **kwargs):
     raise LoanCheckoutByPatronForbidden(int(loan["patron_pid"]), current_user.id)
 
 
+class PatronOwnerReadPermission(Permission):
+    """Return Permission to evaluate if the current user owns the record or has backoffice read access."""
+
+    def __init__(self, record):
+        """Constructor."""
+        super().__init__(
+            UserNeed(int(record["patron_pid"])),
+            backoffice_access_action,
+            backoffice_readonly_access_action,
+        )
+
+
 class PatronOwnerPermission(Permission):
     """Return Permission to evaluate if the current user owns the record."""
 
@@ -179,13 +197,15 @@ _is_backoffice_permission = [
     "circulation-loan-update-dates",
     "relations-create",
     "relations-delete",
-    "stats-most-loaned",
     "document-request-actions",
     "bucket-create",
     "ill-brwreq-patron-loan-create",
     "ill-brwreq-patron-loan-extension-accept",
     "ill-brwreq-patron-loan-extension-decline",
-    "send-notification-to-patron",
+]
+_is_backoffice_read_permission = [
+    "stats-most-loaned",
+    "get-notifications-sent-to-patron",
 ]
 _is_patron_owner_permission = [
     "document-request-decline",
@@ -199,6 +219,8 @@ def views_permissions_factory(action):
         return authenticated_user_permission()
     elif action in _is_backoffice_permission:
         return backoffice_permission()
+    elif action in _is_backoffice_read_permission:
+        return backoffice_read_permission()
     elif action in _is_patron_owner_permission:
         return PatronOwnerPermission
     elif action == "circulation-loan-checkout":

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/providers/config.py

@@ -10,7 +10,10 @@
 from invenio_records_rest.facets import terms_filter
 
 from invenio_app_ils.config import RECORDS_REST_MAX_RESULT_WINDOW
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import (
+    backoffice_permission,
+    backoffice_read_permission,
+)
 
 from .api import PROVIDER_PID_FETCHER, PROVIDER_PID_MINTER, PROVIDER_PID_TYPE, Provider
 from .indexer import ProviderIndexer
@@ -47,8 +50,8 @@ RECORDS_REST_ENDPOINTS = dict(
         default_media_type="application/json",
         max_result_window=RECORDS_REST_MAX_RESULT_WINDOW,
         error_handlers=dict(),
-        read_permission_factory_imp=backoffice_permission,
-        list_permission_factory_imp=backoffice_permission,
+        read_permission_factory_imp=backoffice_read_permission,
+        list_permission_factory_imp=backoffice_read_permission,
         create_permission_factory_imp=backoffice_permission,
         update_permission_factory_imp=backoffice_permission,
         delete_permission_factory_imp=backoffice_permission,

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/records/permissions.py

@@ -12,7 +12,10 @@ from flask_principal import ActionNeed, RoleNeed, UserNeed
 from invenio_access import Permission, any_user
 from six import string_types
 
-from invenio_app_ils.permissions import backoffice_access_action
+from invenio_app_ils.permissions import (
+    backoffice_access_action,
+    backoffice_readonly_access_action,
+)
 
 create_records_action = ActionNeed("create-records")
 
@@ -68,7 +71,10 @@ class RecordPermission(Permission):
         if self.is_public():
             return [any_user]
         else:
-            return self.record_needs() + [backoffice_access_action]
+            return self.record_needs() + [
+                backoffice_readonly_access_action,
+                backoffice_access_action,
+            ]
 
     def record_explicit_restrictions(self):
         """Return the list of user ids/roles allowed for the given action."""

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/records/views.py

@@ -17,7 +17,7 @@ from invenio_rest import ContentNegotiatedMethodView
 from invenio_app_ils.documents.api import DOCUMENT_PID_TYPE
 from invenio_app_ils.eitems.api import EITEM_PID_TYPE
 from invenio_app_ils.errors import StatsError
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import backoffice_read_permission
 from invenio_app_ils.records.permissions import RecordPermission
 from invenio_app_ils.series.api import SERIES_PID_TYPE
 from invenio_app_ils.signals import file_downloaded, record_viewed
@@ -62,7 +62,7 @@ class DocumentStatsResource(ContentNegotiatedMethodView):
     def post(self, pid, record, **kwargs):
         """Send a signal to count record view for the record stats."""
         factory = RecordPermission(record, "read")
-        if not factory.is_public() and not backoffice_permission().can():
+        if not factory.is_public() and not backoffice_read_permission().can():
             if not current_user.is_authenticated:
                 abort(401)
             abort(403)

{invenio_app_ils-5.1.0 → invenio_app_ils-6.1.0}/invenio_app_ils/search_permissions.py

@@ -13,7 +13,7 @@ from flask import current_app, g, has_request_context, request
 from invenio_search.engine import dsl
 
 from invenio_app_ils.errors import SearchQueryError, UnauthorizedSearchError
-from invenio_app_ils.permissions import backoffice_permission
+from invenio_app_ils.permissions import backoffice_read_permission
 
 
 def _get_user_provides():
@@ -30,7 +30,7 @@ def _get_user_provides():
 
 def search_filter_record_permissions():
     """Filter list of results by `_access` and `restricted` fields."""
-    if not has_request_context() or backoffice_permission().allows(g.identity):
+    if not has_request_context() or backoffice_read_permission().allows(g.identity):
         return dsl.Q()
 
     # A record is public if `restricted` field False or missing
@@ -120,7 +120,7 @@ def _filter_by_patron(patron_id, search, query_string=None):
 def _filter_by_current_patron(search, query_string=None):
     """Filter search results by patron_pid."""
     # if the logged in user is not librarian or admin, validate the query
-    if has_request_context() and not backoffice_permission().allows(g.identity):
+    if has_request_context() and not backoffice_read_permission().allows(g.identity):
         return _filter_by_patron(g.identity.id, search, query_string)
     return search, query_string