refs #22495 [finc] Check rights for PAIA method paiaGetItems in FincILS

module/finc/src/finc/ILS/Driver/FincILS.php

@@ -1138,6 +1138,11 @@ class FincILS extends PAIA implements LoggerAwareInterface
      */
     protected function paiaGetItems($patron, $filter = [])
     {
+        // check if user has appropriate scope
+        if (!$this->paiaCheckScope(self::SCOPE_READ_ITEMS)) {
+            throw new ILSException('You are not entitled to read items.');
+        }
+
         // check for existing data in cache
         if ($this->paiaCacheEnabled) {
             $itemsResponse = $this->getCachedData($patron['cat_username']);