circulation ui: check if item or patron is in same organisation

* Closes rero#377

Co-Authored-by: Bertrand Zuchuat <bertrand.zuchuat@rero.ch>

rero_ils/modules/items/api.py

@@ -285,6 +285,11 @@ def dumps_for_circulation(self):
         location = Location.get_record_by_pid(item['location']['pid'])
         loc_data = location.dumps()
         data['location']['name'] = loc_data['name']
+        organisation = self.get_organisation()
+        data['location']['organisation'] = {
+            'pid': organisation.get('pid'),
+            'name': organisation.get('name')
+        }
         data['actions'] = list(self.actions)
         data['available'] = self.available
         # data['number_of_requests'] = self.number_of_requests()

ui/src/app/circulation/main-checkin-checkout/main-checkin-checkout.component.ts

@@ -111,10 +111,13 @@ export class MainCheckinCheckoutComponent implements OnInit, NoPendingChange {
   automaticCheckinCheckout(item_barcode) {
     this.itemsService.automaticCheckin(item_barcode).subscribe(item => {
       // TODO: remove this when policy will be in place
-      if (item === null) {
+      if (
+        item === null ||
+        item.location.organisation.pid !== this.loggedUser.library.organisation.pid
+      ) {
         this.toastService.warning(_('item not found!'), _('checkin'));
         return;
-        }
+      }
       if (item.loan) {
         this.getPatronInfo(item.loan.patron_pid);
       }
@@ -191,6 +194,10 @@ export class MainCheckinCheckoutComponent implements OnInit, NoPendingChange {
     if (barcode) {
       this.userService.getPatron(barcode).subscribe(
         (patron) => {
+          if (patron !== null && patron.organisation.pid !== this.loggedUser.library.organisation.pid) {
+            this.toastService.warning(_('patron not found!'), _('checkin'));
+            return;
+          }
           if (patron === null) {
             const newItem = this.items.find(item => item.barcode === barcode);
             if (newItem) {