The Coral user in Koha needs a specific permission set for accessing vendors

[a-roussos]

I followed the ILS integration documentation for Koha but was having trouble while trying to add a new organization in Coral (version used was 2020.09). Specifically, while typing the first few letters of a vendor in Coral's Name field (the vendor I was looking up already existed in Koha), I could not get any information from my Koha instance (version 20.05.05).

Turns out Koha was actually replying with a 403 which included the required permissions that needed to be set so that the Coral user would be able to query vendor data:

HTTP/1.1 403 Forbidden
Date: Fri, 26 Feb 2021 12:41:38 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 122
Vary: User-Agent
Content-Type: application/json; charset=utf8

{"error":"Authorization failure. Missing required permission(s).","required_permissions":{"acquisition":"vendors_manage"}}

After I gave my user the required permissions I was able to successfully query vendor data from Koha.

I suggest we update the documentation to reflect this requirement -- expect a PR soon.