Bug 29000

Summary: Create a display of patrons with permissions
Product: Koha Reporter: Fridolin Somers <fridolin.somers>
Component: PatronsAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: andrew, dcook, gmcharlt, kyle.m.hall, m.de.rooy, severine.queune
Version: Main   
Hardware: All   
OS: All   
See Also: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28991
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Description Fridolin Somers 2021-09-10 20:36:05 UTC
Actually it is hard to find which patrons have which permissions.
It can lead to mistakes and security issues.

I've created a POC plugin :
https://github.com/biblibre/koha-plugin-users-with-permissions

Maybe permissions could be displayed in patrons search table.
Comment 1 Andrew Fuerste-Henry 2021-09-10 20:52:37 UTC
+1, this would be handy
Comment 2 David Cook 2021-09-12 23:52:29 UTC
I actually wrote a simple PHP script to do this about 10 years ago, as a library needed to be able to easily audit user permissions, and I've been meaning to convert it into Perl... but it looks like you've saved me the hassle!
Comment 3 David Cook 2021-09-12 23:55:51 UTC
I have it in the Tools module with the label "User Audit", but I suppose it should be in the "Patrons" module? Maybe next to "Patron lists" we could have a "Permission audit" or "Permission review" button?
Comment 4 Fridolin Somers 2021-09-14 00:33:27 UTC
(In reply to David Cook from comment #3)
> I have it in the Tools module with the label "User Audit", but I suppose it
> should be in the "Patrons" module? Maybe next to "Patron lists" we could
> have a "Permission audit" or "Permission review" button?

Yep.
Maybe a link "Patrons with permissions" ;)
Comment 5 David Cook 2021-09-14 01:56:02 UTC
(In reply to Fridolin Somers from comment #4)
> (In reply to David Cook from comment #3)
> > I have it in the Tools module with the label "User Audit", but I suppose it
> > should be in the "Patrons" module? Maybe next to "Patron lists" we could
> > have a "Permission audit" or "Permission review" button?
> 
> Yep.
> Maybe a link "Patrons with permissions" ;)

Well, all patrons have permissions though, even if it's minimal permissions. That would also take up a lot of room on the screen on a Patrons toolbar.
Comment 6 Fridolin Somers 2021-09-14 10:06:34 UTC
"Permission review" sounds good then.